tocsin

Debian/nginx: unknown

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting

Action: Upgrade nginx to 1.22.1-9+deb12u5 or later.

Affected

introducedfixedlast affected
01.22.1-9+deb12u5-

Fixed versions

1.22.1-9+deb12u5

Sources

published · modified · JSON