elsa-2025-3262

oracle_linux
Description

[1.24.0-4.0.1.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-4.1] - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) [1:1.24.0-4] - Resolves: RHEL-49350 - nginx worker processes memory leak [1:1.24.0-3] - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx [1:1.24.0-2] - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set [1:1.24.0-1] - new version 1.24.0 [1:1.22.1-5] - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) [1:1.22.1-4] - Resolves: #2170808 - Running nginx with systemctl and entering ssl private key's pass phrase - added new ssl_pass_phrase_dialog directive which enables setting external program for entering password for encrypted private key

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2024-7347"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[1.24.0-4.0.1.1]\n- Reference oracle-indexhtml within Requires [Orabug: 33802044]\n- Remove Red Hat references [Orabug: 29498217]\n\n[1:1.24.0-4.1]\n- Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause\n  denial of service (CVE-2024-7347)\n\n[1:1.24.0-4]\n- Resolves: RHEL-49350 - nginx worker processes memory leak\n\n[1:1.24.0-3]\n- Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx\n\n[1:1.24.0-2]\n- Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set\n\n[1:1.24.0-1]\n- new version 1.24.0\n\n[1:1.22.1-5]\n- Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web\n  servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)\n\n[1:1.22.1-4]\n- Resolves: #2170808 - Running nginx with systemctl and entering ssl\n  private key's pass phrase\n- added new ssl_pass_phrase_dialog directive which enables setting\n  external program for entering password for encrypted private key",
  "id": "ELSA-2025-3262",
  "ovalId": "oval:com.oracle.elsa:def:20253262",
  "source": "oracle_linux",
  "title": "ELSA-2025-3262:  nginx:1.24 security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-3262.html"
}
View JSON API Download JSON