tocsin

Debian/nginx: unknown

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses. This allows an attacker-controlled DNS server

Action: Upgrade nginx to 1.22.1-9+deb12u5 or later.

Affected

introducedfixedlast affected
01.22.1-9+deb12u5-

Fixed versions

1.22.1-9+deb12u5

Sources

published · modified · JSON