Medium RHSA-2025:3261 1 CVE

Red Hat Security Advisory: nginx:1.22 security update

Published Mar 27, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 18

Release	Package	Fixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-all-modules	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-core	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-core-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-debugsource	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-filesystem	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-devel	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-http-image-filter	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-http-image-filter-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-http-perl	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-http-perl-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-http-xslt-filter	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-http-xslt-filter-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-mail	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-mail-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-stream	1:1.22.1-8.module+el9.5.0+22953+b175c265.1
Red Hat · RHEL 9 enterprise_linux:9::appstream	nginx-mod-stream-debuginfo	1:1.22.1-8.module+el9.5.0+22953+b175c265.1

Vulnerabilities 1

Medium 4.7

CVE-2024-7347

NGINX MP4 module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with…

F5 NGINX Plus NGINX Open Source nginx Network devices Debian Ubuntu Azure Linux Alpine

Aug 14, 2024

References

article
https://access.redhat.com/security/updates/classification/#moderate
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3261.json
report
https://access.redhat.com/security/cve/CVE-2024-7347
report
https://bugzilla.redhat.com/show_bug.cgi?id=2304966
advisory
https://www.cve.org/CVERecord?id=CVE-2024-7347
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-7347
article
https://my.f5.com/manage/s/article/K000140529