tocsin

Alpine/nginx: medium 4.7

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted

Action: Upgrade nginx to 1.26.2-r0 or later.

Affected

introducedfixedlast affected
01.26.2-r0-

Fixed versions

1.26.2-r0

Sources

published · modified · JSON