Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Oracle Linux 9 ELSA-2025-3262: Moderate nginx Security Advisory

oracle
Calendar Grey April 1, 2025
Oracle Linux Logo Esm H88
Oracle Linux 9 has issued a security advisory for nginx updates addressing a moderate severity vulnerability. Administrators should review patched versions and upgrade nginx to mitigate risks.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[1.24.0-4.0.1.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-4.1] - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) [1:1.24.0-4] - Resolves: RHEL-49350 - nginx worker processes memory leak [1:1.24.0-3] - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx [1:1.24.0-2] - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set [1:1.24.0-1] - new version 1.24.0 [1:1.22.1-5] - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) [1:1.22.1-4] - Resolves: #2170808 - Running nginx with systemctl and entering ssl private key's pass phrase - added new ssl_pass_phrase_dialog directive which enables setting external program for entering password for encrypted private key

Topics%20covered

Topics Covered

security advisory moderate denial of service update nginx Oracle Linux

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates//nginx-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.src.rpm

x86_64

nginx-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-all-modules-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.noarch.rpm nginx-core-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-filesystem-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.noarch.rpm nginx-mod-devel-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-mod-http-image-filter-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-mod-http-perl-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-mod-http-xslt-filter-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-mod-mail-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm nginx-mod-stream-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.x86_64.rpm

aarch64

nginx-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-all-modules-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.noarch.rpm nginx-core-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-filesystem-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.noarch.rpm nginx-mod-devel-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-mod-http-image-filter-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-mod-http-perl-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-mod-http-xslt-filter-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-mod-mail-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm nginx-mod-stream-1.24.0-4.0.1.module+el9.5.0+90543+4953bb61.1.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2024-7347

Topics%20covered

Topics Covered

security advisory moderate denial of service update nginx Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here