[CLSA-2024:1730479989] Fix CVE(s): CVE-2023-7347, CVE-2024-7347
Type:
security
Severity:
Moderate
Release date:
2024-11-01 16:53:14 UTC
Description:
* SECURITY UPDATE: mp4 module allows buffer underread and unordered chunks - debian/patches/CVE-2024-7347.patch: fix buffer underread while updating stsz atom and reject unordered chunks - CVE-2023-7347
Updated packages:
  • libnginx-mod-http-auth-pam_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:4ccc30677da8746ae309c9ce8bc64ff7740ab5ce
  • libnginx-mod-http-cache-purge_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:fd3567eb6b7778d9e876bc96680f88980533eb91
  • libnginx-mod-http-dav-ext_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:195b60ae4d8a89b3eff0140471e5864f2cf72f2d
  • libnginx-mod-http-echo_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:4b4446ee5ef87f161b3e86ee274a3274fe21dd73
  • libnginx-mod-http-fancyindex_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:7f692ddb1f4c983806b9dafa3da33d9eaed00010
  • libnginx-mod-http-geoip_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:3543802f60de92f58d17efca5f99c593e783d365
  • libnginx-mod-http-headers-more-filter_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:c11d11688fedde7b61e8744c454bf23d1845d47c
  • libnginx-mod-http-image-filter_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:1f0ebc82da0a5ab9f1e66d32d35f3bda70fe8da3
  • libnginx-mod-http-lua_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:4c69dcc2fc16424110075785f5c276f163d1ce0d
  • libnginx-mod-http-ndk_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:746a7ebc95049f6a4e141e7a5ab0603d15a8c565
  • libnginx-mod-http-perl_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:f6e241b5d1b83eeb5dc47497efac6a470265b8ff
  • libnginx-mod-http-subs-filter_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:676d7820eda6e22d2849a86628dc274f674fb47f
  • libnginx-mod-http-uploadprogress_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:2535e1ab1f15d0d6ad383e0817beef6f91f4c6ed
  • libnginx-mod-http-upstream-fair_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:76d036e110ca3167d01fec0414b45b3697c6c843
  • libnginx-mod-http-xslt-filter_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:285b9b01cfcf6db70b81411ef88e692765c29e56
  • libnginx-mod-mail_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:e9990eb18bfcd217c3cfe164dedfa5112a0c75ca
  • libnginx-mod-nchan_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:7a1a0621ef1b3fd121bfbd8cfc86157261779d2f
  • libnginx-mod-rtmp_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:d1cc5b8f5995edd8bc2ddc68f38f1f9f8fe36258
  • libnginx-mod-stream_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:a0934cc2168be17aaadf0a9bb671764b67603b68
  • nginx_1.14.0-0ubuntu1.11+tuxcare.els2_all.deb
    sha:29b26aa09c0d47ce374131b3506e1f3312a37441
  • nginx-common_1.14.0-0ubuntu1.11+tuxcare.els2_all.deb
    sha:178ea24c7ed6559b961f3b3c53d711a98d11bcd6
  • nginx-core_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:6c0f46325b1d986c5b075b6cd3830f0bedbecdaf
  • nginx-doc_1.14.0-0ubuntu1.11+tuxcare.els2_all.deb
    sha:3505a3e120e7350a412e69b72d09660b28b89213
  • nginx-extras_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:ec8818acde5e61b3de651dbde5a60c0a0d38e2cc
  • nginx-full_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:52e949f7df0658a8d13a3de2dd90f05d8ea00728
  • nginx-light_1.14.0-0ubuntu1.11+tuxcare.els2_amd64.deb
    sha:3d97b4f8f001e2a1f47e782833118eb3adce58ab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.