tocsin

Debian/nginx: unknown

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or

Action: Upgrade nginx to 1.22.1-9+deb12u7 or later.

Affected

introducedfixedlast affected
01.22.1-9+deb12u7-

Fixed versions

1.22.1-9+deb12u7

Sources

published · modified · JSON