[CLSA-2025:1744633827] nginx: Fix of CVE-2024-7347
Type:
security
Severity:
Moderate
Release date:
2025-04-14 12:30:32 UTC
Description:
- CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault.
Updated packages:
  • nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:fdb7af82111df239469e7ae92ffbbead3d58f1dabcafb190147664394bbbc162
  • nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.noarch.rpm
    sha:f3088eb9189ed68b20fff992078ca18d74803abfba2794b3f7e387228f2e563f
  • nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:8362cfa3764e91366ec37b6bf8c4e82d429a90efa4a1084199ecd4e32756d1ba
  • nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.noarch.rpm
    sha:b82da45edbadd0958be6ce628e2cce47982eebe30d362300029abedbfcbe41ec
  • nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:8f62dd7bab5378cf449514dc94a89d9d0c54bd0cd4d29b6d8b03719747ec9bac
  • nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:667e49edbd85c4e8ded9d6e66ca3447bc1492e02905872da75716757205ef11f
  • nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:2a3f603901413e5418b2a6d8a2ab135ddba6affa47aa5f1abf48cd1a1c1eec92
  • nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:a88ddb1f2e6cf6819e43bf7a6c68cd66a9c50a96b7337cd351a05acf48e44f9d
  • nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:3cafd32a8b5fadd5a0c4a7218c19519684fa014287478ea10cd9486b36277044
  • nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm
    sha:89c80f2ef57b285ef4fc2de975358b8119cd43f89dd5f6b7e420fce720cabd3c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.