Red Hat Security AdvisoryRHSA-2025:3261
nginx:1.22 security update
Released 2025-03-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) nginx-1:1.22.1-8.module+el9.5.0+22953+b175c265.1.aarch64::nginx:1.22, nginx-1:1.22.1-8.module+el9.5.0+22953+b175c265.1.ppc64le::nginx:1.22, nginx-1:1.22.1-8.module+el9.5.0+22953+b175c265.1.s390x::nginx:1.22 +32
Fixes 1 record
Priority LOW 26
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file.
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.0032 · Published 2024-08-14 · Partial fix CWE-126
