Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: nginx-mod-modsecurity 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
SUSE: 2022:4265-1 important: nginx
An update that fixes one vulnerability is now available.
SUSE: 2022:4266-1 important: nginx
An update that fixes one vulnerability is now available.
SUSE: 2022:4201-1 important: nginx
An update that fixes one vulnerability is now available.
Mageia 2022-0398: nginx security update
Two security issues were identified in the ngx_http_mp4_module, which might allow an attacker to cause a worker process crash or worker process memory disclosu…
Fedora 33: nginx 2021-b37cffac
Fix log permissions issue ---- Security: 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowi…
openSUSE: 2019:2264-1: moderate: nginx
An update that fixes three vulnerabilities is now available.
SUSE: 2019:2559-1 moderate: nginx
An update that fixes three vulnerabilities is now available.
HTTP/2 Bomb: Why Linux Infrastructure is Vulnerable to a New Low-Bandwidth DoS Attack
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Mageia 2024-0235: python-aiohttp Security Advisory Updates
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulner…
Debian LTS: DLA-2367-1: lemonldap-ng security upda
lemonldap-ng community fixed a vulnerability in the Nginx default configuration files (CVE-2020-24660). Debian package does not install any default site, but d…