Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:0205-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:0205-1

UNKNOWN

Security update for nginx

Published Jan 27, 2023

Modified 2 years ago

Fix available

Details

This update for nginx fixes the following issues:

CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526)
CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527)

Affected Packages

SUSE:Enterprise Storage 7.1nginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Enterprise Storage 7.1nginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSnginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSnginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSnginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSnginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise Real Time 15 SP3nginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise Real Time 15 SP3nginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise Server 15 SP3-LTSSnginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise Server 15 SP3-LTSSnginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3nginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3nginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Manager Proxy 4.2nginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Manager Proxy 4.2nginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Manager Retail Branch Server 4.2nginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Manager Retail Branch Server 4.2nginx-source

Fixed in:

1.19.8-150300.3.12.1

SUSE:Manager Server 4.2nginx

Fixed in:

1.19.8-150300.3.12.1

SUSE:Manager Server 4.2nginx-source

Fixed in:

1.19.8-150300.3.12.1

openSUSE:Leap 15.4nginx

Fixed in:

1.19.8-150300.3.12.1

openSUSE:Leap 15.4vim-plugin-nginx

Fixed in:

1.19.8-150300.3.12.1

Timeline

PublishedJan 27, 2023

ModifiedJan 27, 2023

SUSE-SU-2023:0205-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline