Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Mageia: Nginx Critical Buffer Over-read Vuln MGASA-2025-0245 CVE-2025-53859

mageia
Calendar Grey October 22, 2025
Dist Mageia Esm H88
Updated nginx package in Mageia addresses a buffer overflow issue leading to possible sensitive data leaks.
MGASA-2025-0245 - Updated nginx package fixes security vulnerability

Summary

Description: It was discovered that nginx contains a security issue in the ngx_mail_smtp_module which might allow an attacker to cause buffer over-read potentially resulting in sensitive information leak in a HTTP request to the authentication server (CVE-2025-53859).

References

- https://bugs.mageia.org/show_bug.cgi?id=34585

- https://www.openwall.com/lists/oss-security/2025/08/13/5

- https://www.cve.org/CVERecord?id=CVE-2025-53859

Topics%20covered

Topics Covered

security advisory information leak buffer overflow nginx authentication server Mageia

Resolution

SRPMS

- 9/core/nginx-1.26.3-1.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 22 Oct 2025
URL: https://advisories.mageia.org/MGASA-2025-0245.html
Type: security
CVE: CVE-2025-53859

Topics%20covered

Topics Covered

security advisory information leak buffer overflow nginx authentication server Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here