Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Multiple vulnerabilities have been discovered in nginx, the worst of which could result in denial of service.
The container suse/nginx was updated. The following patches have been included in this update:
Three unpatched high-severity security flaws have been disclosed in theNGINX Ingress controllerfor Kubernetes that could be weaponized by a threat actor to ste…
The container suse/nginx was updated. The following patches have been included in this update:
The container suse/nginx was updated. The following patches have been included in this update:
The container suse/rmt-nginx was updated. The following patches have been included in this update:
A security issue was fixed in nginx's lua module.
The container suse/rmt-nginx was updated. The following patches have been included in this update:
nginx could be made to redirect network traffic.
Several security issues were fixed in nginx.
An update for the nginx:1.20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact…
The package kubectl-ingress-nginx before version 1.0.4-1 is vulnerable to information disclosure.
A security issue was fixed in nginx.
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
A flaw was found in nginx. An off-by-one error while processing DNS responses allows a network attacker to write a dot character out of bounds in a heap alloca…
Jamie Landeg-Jones and Manfred Paul discovered a buffer overflow vulnerability in NGINX, a small, powerful, scalable web/proxy server. NGINX has a buffer overf…
An update for rh-nginx116-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact o…
An update for the nginx:1.18 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact…
An update for rh-nginx118-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact o…
nginx could be made to crash or run programs if it received specially crafted network traffic.
nginx could be made to crash or run programs if it received specially crafted network traffic.
The container ingress-nginx-controller was updated. The following patches have been included in this update:
