SUSE-SU-2023:0293-1

UNKNOWN

Security update for nginx

Published Feb 7, 2023

Modified 2 years ago

Fix available

This update for nginx fixes the following issues:

CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526)
CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527)

SUSE:Enterprise Storage 6nginx

Fixed in:

1.16.1-150100.6.19.1

SUSE:Enterprise Storage 6nginx-source

Fixed in:

1.16.1-150100.6.19.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSnginx

Fixed in:

1.16.1-150100.6.19.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSnginx-source

Fixed in:

1.16.1-150100.6.19.1

SUSE:Linux Enterprise Server 15 SP1-LTSSnginx

Fixed in:

1.16.1-150100.6.19.1

SUSE:Linux Enterprise Server 15 SP1-LTSSnginx-source

Fixed in:

1.16.1-150100.6.19.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1nginx

Fixed in:

1.16.1-150100.6.19.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1nginx-source

Fixed in:

1.16.1-150100.6.19.1

PublishedFeb 7, 2023

ModifiedFeb 7, 2023

SUSE-SU-2023:0293-1 | Mondoo Vulnerability Intelligence