RHSA-2025:3261: Moderate: nginx:1.22 security update
Published Mar 26, 2025
·Updated
Moderate: nginx:1.22 security update
Other sources
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fix(es): nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
70 affected componentsFixes available
redhat/nginx<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-all-modules<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-filesystem<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-core<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-core-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-debugsource<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-devel<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-image-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-image-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-perl<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-perl-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-xslt-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-xslt-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-mail<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-mail-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-stream<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-stream-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-core<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-core-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-debugsource<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-devel<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-image-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-image-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-perl<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-perl-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-xslt-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-xslt-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-mail<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-mail-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-stream<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-stream-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-core<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-core-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-debugsource<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-devel<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-image-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-image-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-perl<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-perl-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-xslt-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-http-xslt-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-mail<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-mail-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-stream<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx-mod-stream-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1
1.22.1-8.module+el9.5.0+22953+b175c265.1
redhat/nginx<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-core<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-core-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-debugsource<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-devel<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-http-image-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-http-image-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-http-perl<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-http-perl-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-http-xslt-filter<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-http-xslt-filter-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-mail<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-mail-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-stream<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
redhat/nginx-mod-stream-debuginfo<1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
1.22.1-8.module+el9.5.0+22953+b175c265.1.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux for Power, little endian
Remediation
Event History
Mar 26, 2025
Advisory Published
via Red Hat·12:00 AM
Frequently Asked Questions
1
What is the severity of RHSA-2025:3261?
The severity of RHSA-2025:3261 is classified as moderate.
2
How do I fix RHSA-2025:3261?
To fix RHSA-2025:3261, update your nginx packages to version 1.22.1-8.module+el9.5.0+22953+b175c265.1.
3
What vulnerability does RHSA-2025:3261 address?
RHSA-2025:3261 addresses a vulnerability where a specially crafted MP4 file may cause denial of service (CVE-2024-7347).
4
Which nginx versions are affected by RHSA-2025:3261?
Nginx versions below 1.22.1-8.module+el9.5.0+22953+b175c265.1 are affected by RHSA-2025:3261.
5
Is a reboot required after applying the fix for RHSA-2025:3261?
Typically, a reboot is not required after applying the update for RHSA-2025:3261, but services may need to be restarted.