USN-3114-1: nginx vulnerability | Ubuntu security notices

Packages

nginx - small, powerful, scalable web/proxy server

Details

Dawid Golunski discovered that the nginx package incorrectly handled log
file permissions. A remote attacker could possibly use this issue to obtain
root privileges.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
16.10 yakkety	nginx-common – 1.10.1-0ubuntu1.1
	nginx-core – 1.10.1-0ubuntu1.1
	nginx-extras – 1.10.1-0ubuntu1.1
	nginx-full – 1.10.1-0ubuntu1.1
	nginx-light – 1.10.1-0ubuntu1.1
16.04 xenial	nginx-common – 1.10.0-0ubuntu0.16.04.3
	nginx-core – 1.10.0-0ubuntu0.16.04.3
	nginx-extras – 1.10.0-0ubuntu0.16.04.3
	nginx-full – 1.10.0-0ubuntu0.16.04.3
	nginx-light – 1.10.0-0ubuntu0.16.04.3
14.04 trusty	nginx-common – 1.4.6-1ubuntu3.6
	nginx-core – 1.4.6-1ubuntu3.6
	nginx-extras – 1.4.6-1ubuntu3.6
	nginx-full – 1.4.6-1ubuntu3.6
	nginx-light – 1.4.6-1ubuntu3.6

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2016-1247

CVE-2016-1247