tocsin

Alpine/nginx: unknown

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server

Action: Upgrade nginx to 1.28.3-r0 or later.

Affected

introducedfixedlast affected
01.28.3-r0-

Fixed versions

1.28.3-r0

Sources

published · modified · JSON