[CLSA-2022:1669065608] Fix CVE(s): CVE-2022-41742, CVE-2022-41741
Type:
security
Severity:
Important
Release date:
2022-11-21 21:20:08 UTC
Description:
* SECURITY UPDATE: memory corruption and disclosure in MP4 streaming module - debian/patches/CVE-2022-41741-CVE-2022-41742.patch: disable duplicated atoms and ensure that (the most of them) appeared once in a container. - CVE-2022-41741 - CVE-2022-41742
Updated packages:
  • nginx_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_all.deb
    sha:1d23658d824f19c77f5ed914f1adc5a544a34887
  • nginx-common_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_all.deb
    sha:826db7145bcb98bf916b033c1a2a9e74459950d7
  • nginx-core_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_amd64.deb
    sha:ad5193766113066f8ce2baeca52606588f18193a
  • nginx-doc_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_all.deb
    sha:7a126fb1a9c6b9ce489282e608aa54b8d8f1ae07
  • nginx-extras_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_amd64.deb
    sha:15790b901bf43acbe3c0668cb06ee0505e7bd176
  • nginx-full_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_amd64.deb
    sha:9cf9cc82899de04a7288c62694bb0f6d63d48e4e
  • nginx-light_1.10.3-0ubuntu0.16.04.8+tuxcare.els3_amd64.deb
    sha:fc3f4ddb7b2b6e7fffd93a7c0888390081b55b7d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.