Security update for nginx
This update to nginx 1.8.1 fixes the following issues:
- CVE-2016-0742: Invalid pointer dereference during DNS server response processing (boo#963781)
- CVE-2016-0746: Use-after-free condition during CNAME response processing (boo#963778)
- CVE-2016-0747: Resource exhaustion through unlimited CNAME resolution (boo#963775)
-
Submitted by
Marguerite Su (MargueriteSu)
Fixed bugs
bnc#963775
VUL-1: CVE-2016-0747: nginx-1.0: Resource exhaustion through unlimited CNAME resolution
bnc#963778
VUL-1: CVE-2016-0746: nginx-1.0: Use-after-free condition during CNAME response processing
bnc#963781
VUL-0: CVE-2016-0742: nginx-1.0: Invalid pointer dereference during DNS server response processing
