Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 7014-1: nginx Security Advisory Updates
nginx could be made to crash if it received specially crafted network traffic.
SUSE: 2024:397-1 suse/nginx Security Update
The container suse/nginx was updated. The following patches have been included in this update:
Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes
Three unpatched high-severity security flaws have been disclosed in theNGINX Ingress controllerfor Kubernetes that could be weaponized by a threat actor to ste…
SUSE: 2023:2776-1 suse/nginx Security Update
The container suse/nginx was updated. The following patches have been included in this update:
SUSE: 2023:2737-1 suse/nginx Security Update
The container suse/nginx was updated. The following patches have been included in this update:
SUSE: 2023:323-1 suse/rmt-nginx Security Update
The container suse/rmt-nginx was updated. The following patches have been included in this update:
Debian LTS: DLA-3203-1: nginx security update
It was discovered that parsing errors in the mp4 module of Nginx, a high-performance web and reverse proxy server, could result in denial of service, memory di…
Debian: DSA-5281-1: nginx security update
It was discovered that parsing errors in the mp4 module of Nginx, a high-performance web and reverse proxy server, could result in denial of service, memory di…
Ubuntu 5371-3: nginx vulnerability
A security issue was fixed in nginx's lua module.
SUSE: 2022:1229-1 suse/rmt-nginx Security Update
The container suse/rmt-nginx was updated. The following patches have been included in this update:
Ubuntu 5371-2: nginx vulnerabili
nginx could be made to redirect network traffic.
Ubuntu 5371-1: nginx vulnerabiliti
Several security issues were fixed in nginx.
RedHat: RHSA-2022-0323:02 Important: nginx:1.20 security upda
An update for the nginx:1.20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact…
New malware hides as legit nginx process on e-commerce serve
eCommerce servers are being targeted with remote access malware that hides on Nginx servers in a way that makes it virtually invisible to security solutions. '…
New Payment Data Stealing Malware Hides in Nginx Process on Linux Servers
E-commerce platforms in the U.S., Germany, and France have come under attack from a new form of malware that targets Nginx servers in an attempt to masquerade …
New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers
E-commerce platforms in the U.S., Germany, and France have come under attack from a new form of malware that targets Nginx servers in an attempt to masquerade …
ArchLinux: 202111-7: kubectl-ingress-nginx: information disclosu
The package kubectl-ingress-nginx before version 1.0.4-1 is vulnerable to information disclosure.
Ubuntu 5109-1: nginx vulnerabili
A security issue was fixed in nginx.
Fedora 33: nginx 2021-a856024c
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Fedora 34: nginx 2021-031436cb
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Mageia 2021-0301: nginx security upda
A flaw was found in nginx. An off-by-one error while processing DNS responses allows a network attacker to write a dot character out of bounds in a heap alloca…
RedHat: RHSA-2021-2290:01 Important: nginx:1.16 security upda
An update for the nginx:1.16 module is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Extended Update Support, and Red Hat Enterpri…
Debian LTS: DLA-2680-1: nginx security upda
Jamie Landeg-Jones and Manfred Paul discovered a buffer overflow vulnerability in NGINX, a small, powerful, scalable web/proxy server. NGINX has a buffer overf…
RedHat: RHSA-2021-2278:01 Important: rh-nginx116-nginx security upda
An update for rh-nginx116-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact o…