Red Hat Security Advisory

RHSA-2025:7548

nginx:1.22 security update

Released 2025-05-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) nginx-1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1.aarch64::nginx:1.22, nginx-1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1.ppc64le::nginx:1.22, nginx-1:1.22.1-4.module+el9.2.0+23025+9ef399cc.1.s390x::nginx:1.22 +32

Fixes 1 record

TI-2024-06808 CVE-2024-7347 · GHSA-3r23-64c4-mj87

NGINX MP4 module vulnerability

LOW 26

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.0032 Published 2024-08-14 Partial fix CWE-126