Red Hat Security AdvisoryRHSA-2025:7549
nginx:1.22 security update
Released 2025-05-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.4) nginx-1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2.aarch64::nginx:1.22, nginx-1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2.ppc64le::nginx:1.22, nginx-1:1.22.1-5.module+el9.4.0+23013+a6e737ae.2.s390x::nginx:1.22 +32
Fixes 1 record
Priority LOW 26
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file.
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.0032 · Published 2024-08-14 · Partial fix CWE-126
