Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-23419 (GCVE-0-2025-23419)
Vulnerability from cvelistv5
Published
2025-02-05 17:31
Modified
2025-02-12 19:41
Severity ?
4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
5.3 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
5.3 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
VLAI Severity ?
EPSS score ?
CWE
- CWE-287 - Improper Authentication
Summary
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
Impacted products
Vendor | Product | Version | |||||||
---|---|---|---|---|---|---|---|---|---|
► | F5 | NGINX Open Source |
Version: 1.11.4 ≤ |
||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2025-02-05T20:03:02.242Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "url": "http://www.openwall.com/lists/oss-security/2025/02/05/8" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2025-23419", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-02-05T18:12:47.047226Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-02-12T19:41:06.184Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "defaultStatus": "unknown", "product": "NGINX Open Source", "vendor": "F5", "versions": [ { "changes": [ { "at": "1.27.4", "status": "unaffected" }, { "at": "1.26.3", "status": "unaffected" } ], "lessThan": "*", "status": "affected", "version": "1.11.4", "versionType": "semver" } ] }, { "defaultStatus": "unaffected", "product": "NGINX Plus", "vendor": "F5", "versions": [ { "changes": [ { "at": "R32 P2", "status": "unaffected" }, { "at": "R33 P2", "status": "unaffected" } ], "lessThan": "*", "status": "affected", "version": "R17", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "type": "finder", "value": "Sven Hebrok" }, { "lang": "en", "type": "finder", "value": "Felix Cramer" }, { "lang": "en", "type": "finder", "value": "Tim Storm" }, { "lang": "en", "type": "finder", "value": "Maximilian Radoy" }, { "lang": "en", "type": "finder", "value": "Juraj Somorovsky" } ], "datePublic": "2025-02-05T15:00:00.000Z", "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eWhen multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key\"\u003eTLS Session Tickets\u003c/a\u003e are used and/or the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache\"\u003eSSL session cache\u003c/a\u003e are used in the default server and the default server is performing client certificate authentication.\u0026nbsp;\u0026nbsp;\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\n\u003c/p\u003e\u003cbr\u003e\u003cbr\u003e" } ], "value": "When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.\u00a0\u00a0\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] }, { "cvssV4_0": { "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 5.3, "baseSeverity": "MEDIUM", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-287", "description": "CWE-287 Improper Authentication", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-02-05T17:31:07.316Z", "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "shortName": "f5" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://my.f5.com/manage/s/article/K000149173" } ], "source": { "discovery": "EXTERNAL" }, "title": "TLS Session Resumption Vulnerability", "x_generator": { "engine": "F5 SIRTBot v1.0" } } }, "cveMetadata": { "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "assignerShortName": "f5", "cveId": "CVE-2025-23419", "datePublished": "2025-02-05T17:31:07.316Z", "dateReserved": "2025-01-22T00:17:16.444Z", "dateUpdated": "2025-02-12T19:41:06.184Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2025-23419\",\"sourceIdentifier\":\"f5sirt@f5.com\",\"published\":\"2025-02-05T18:15:33.347\",\"lastModified\":\"2025-02-05T20:15:45.717\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.\u00a0\u00a0\\n\\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"f5sirt@f5.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnerableSystemConfidentiality\":\"LOW\",\"vulnerableSystemIntegrity\":\"NONE\",\"vulnerableSystemAvailability\":\"NONE\",\"subsequentSystemConfidentiality\":\"NONE\",\"subsequentSystemIntegrity\":\"NONE\",\"subsequentSystemAvailability\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirements\":\"NOT_DEFINED\",\"integrityRequirements\":\"NOT_DEFINED\",\"availabilityRequirements\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnerableSystemConfidentiality\":\"NOT_DEFINED\",\"modifiedVulnerableSystemIntegrity\":\"NOT_DEFINED\",\"modifiedVulnerableSystemAvailability\":\"NOT_DEFINED\",\"modifiedSubsequentSystemConfidentiality\":\"NOT_DEFINED\",\"modifiedSubsequentSystemIntegrity\":\"NOT_DEFINED\",\"modifiedSubsequentSystemAvailability\":\"NOT_DEFINED\",\"safety\":\"NOT_DEFINED\",\"automatable\":\"NOT_DEFINED\",\"recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"f5sirt@f5.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"f5sirt@f5.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"references\":[{\"url\":\"https://my.f5.com/manage/s/article/K000149173\",\"source\":\"f5sirt@f5.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2025/02/05/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2025/02/05/8\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-02-05T20:03:02.242Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-23419\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-05T18:12:47.047226Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-12T19:39:28.521Z\"}}], \"cna\": {\"title\": \"TLS Session Resumption Vulnerability\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Sven Hebrok\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Felix Cramer\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Tim Storm\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Maximilian Radoy\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Juraj Somorovsky\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 5.3, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"F5\", \"product\": \"NGINX Open Source\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"1.27.4\", \"status\": \"unaffected\"}, {\"at\": \"1.26.3\", \"status\": \"unaffected\"}], \"version\": \"1.11.4\", \"lessThan\": \"*\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"F5\", \"product\": \"NGINX Plus\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"R32 P2\", \"status\": \"unaffected\"}, {\"at\": \"R33 P2\", \"status\": \"unaffected\"}], \"version\": \"R17\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2025-02-05T15:00:00.000Z\", \"references\": [{\"url\": \"https://my.f5.com/manage/s/article/K000149173\", \"tags\": [\"vendor-advisory\"]}], \"x_generator\": {\"engine\": \"F5 SIRTBot v1.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.\\u00a0\\u00a0\\n\\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eWhen multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when \u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key\\\"\u003eTLS Session Tickets\u003c/a\u003e are used and/or the \u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache\\\"\u003eSSL session cache\u003c/a\u003e are used in the default server and the default server is performing client certificate authentication.\u0026nbsp;\u0026nbsp;\\n\\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\\n\\n\u003c/p\u003e\u003cbr\u003e\u003cbr\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-287\", \"description\": \"CWE-287 Improper Authentication\"}]}], \"providerMetadata\": {\"orgId\": \"9dacffd4-cb11-413f-8451-fbbfd4ddc0ab\", \"shortName\": \"f5\", \"dateUpdated\": \"2025-02-05T17:31:07.316Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2025-23419\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-12T19:41:06.184Z\", \"dateReserved\": \"2025-01-22T00:17:16.444Z\", \"assignerOrgId\": \"9dacffd4-cb11-413f-8451-fbbfd4ddc0ab\", \"datePublished\": \"2025-02-05T17:31:07.316Z\", \"assignerShortName\": \"f5\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
fkie_cve-2025-23419
Vulnerability from fkie_nvd
Published
2025-02-05 18:15
Modified
2025-02-05 20:15
Severity ?
Summary
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
Impacted products
Vendor | Product | Version |
---|
{ "cveTags": [], "descriptions": [ { "lang": "en", "value": "When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.\u00a0\u00a0\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated." }, { "lang": "es", "value": "Cuando se configuran varios bloques de servidores para compartir la misma direcci\u00f3n IP y puerto, un atacante puede usar la reanudaci\u00f3n de sesi\u00f3n para eludir los requisitos de autenticaci\u00f3n de certificados de cliente en estos servidores. Esta vulnerabilidad surge cuando se utilizan tickets de sesi\u00f3n TLS https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key y/o se utiliza la cach\u00e9 de sesi\u00f3n SSL https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache en el servidor predeterminado y este est\u00e1 realizando la autenticaci\u00f3n de certificados de cliente. Nota: Las versiones de software que han llegado al final del soporte t\u00e9cnico (EoTS) no se eval\u00faan." } ], "id": "CVE-2025-23419", "lastModified": "2025-02-05T20:15:45.717", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "f5sirt@f5.com", "type": "Secondary" } ], "cvssMetricV40": [ { "cvssData": { "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED" }, "source": "f5sirt@f5.com", "type": "Secondary" } ] }, "published": "2025-02-05T18:15:33.347", "references": [ { "source": "f5sirt@f5.com", "url": "https://my.f5.com/manage/s/article/K000149173" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2025/02/05/8" } ], "sourceIdentifier": "f5sirt@f5.com", "vulnStatus": "Undergoing Analysis", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-287" } ], "source": "f5sirt@f5.com", "type": "Secondary" } ] }
rhea-2025:7287
Vulnerability from csaf_redhat
Published
2025-05-13 08:45
Modified
2025-06-30 08:17
Summary
Red Hat Enhancement Advisory: nginx:1.26 bug fix and enhancement update
Notes
Topic
An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9.
Details
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9.", "title": "Topic" }, { "category": "general", "text": "For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHEA-2025:7287", "url": "https://access.redhat.com/errata/RHEA-2025:7287" }, { "category": "external", "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index", "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_7287.json" } ], "title": "Red Hat Enhancement Advisory: nginx:1.26 bug fix and enhancement update", "tracking": { "current_release_date": "2025-06-30T08:17:33+00:00", "generator": { "date": "2025-06-30T08:17:33+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.3" } }, "id": "RHEA-2025:7287", "initial_release_date": "2025-05-13T08:45:37+00:00", "revision_history": [ { "date": "2025-05-13T08:45:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-05-13T08:45:37+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-06-30T08:17:33+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nginx:1.26:9060020250207002450:9", "product": { "name": "nginx:1.26:9060020250207002450:9", "product_id": "nginx:1.26:9060020250207002450:9", "product_identification_helper": { "purl": "pkg:rpmmod/redhat/nginx@1.26:9060020250207002450:9" } } }, { "category": "product_version", "name": "nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "product": { "name": "nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "product_id": "nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-all-modules@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=noarch\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "product": { "name": "nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "product_id": "nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-filesystem@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=noarch\u0026epoch=2" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "product": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "product_id": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=src\u0026epoch=2" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_id": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=aarch64\u0026epoch=2" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_id": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=ppc64le\u0026epoch=2" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_id": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=s390x\u0026epoch=2" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_id": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.26.3-1.module%2Bel9.6.0%2B22775%2B050511e7?arch=x86_64\u0026epoch=2" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, "product_reference": "nginx:1.26:9060020250207002450:9", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src" }, "product_reference": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch" }, "product_reference": "nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch" }, "product_reference": "nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64 as a component of nginx:1.26:9060020250207002450:9 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-23419", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2025-02-05T18:00:52.408012+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2344005" } ], "notes": [ { "category": "description", "text": "A flaw was found in nginx. When name-based virtual hosts are configured to share the same IP address and port combination with TLS 1.3 and OpenSSL, a previously authenticated attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS session tickets are used, the SSL session cache is used in the default virtual server, and the default virtual server performs client certificate authentication.", "title": "Vulnerability description" }, { "category": "summary", "text": "nginx: TLS Session Resumption Vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "In regulated environments, layered security controls significantly reduce the risk of exploiting this CWE-287: Improper Authentication vulnerability, justifying a severity downgrade from Moderate to Low.\n\nAccess to the platform is granted only after successful authentication through multifactor authentication (MFA). Domain accounts are configured to lock out based on predefined access policies, reducing the effectiveness of brute-force attacks on authentication mechanisms. The platform employs IAM roles for identification and authentication within its cloud infrastructure that govern user access to resources and manage provisioning, deployment, and configuration within the platform environment. This reduces the risk of unauthorized access through third-party or external user accounts. Finally, memory protection mechanisms are used to enhance resilience against unauthorized commands or improper authentication.\n\nThis vulnerability affects NGINX versions 1.11.4 to 1.27.3 and is fixed in 1.27.4 (mainline) and 1.26.3 (stable). RHEL 9 includes a backported fix in the NGINX 1.20 package. In RHEL 8 and 9 modular streams (1.22/1.24), the issue is marked \"Fix deferred\" \u2014 see the FAQ for details. RHEL 10 and later, with NGINX 1.26+, are not affected.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-23419" }, { "category": "external", "summary": "RHBZ#2344005", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344005" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-23419", "url": "https://www.cve.org/CVERecord?id=CVE-2025-23419" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23419", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23419" }, { "category": "external", "summary": "https://my.f5.com/manage/s/article/K000149173", "url": "https://my.f5.com/manage/s/article/K000149173" } ], "release_date": "2025-02-05T17:31:07.316000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-05-13T08:45:37+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2025:7287" }, { "category": "workaround", "details": "Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.", "product_ids": [ "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.src", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-all-modules-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-core-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-debugsource-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-filesystem-2:1.26.3-1.module+el9.6.0+22775+050511e7.noarch", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-devel-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-image-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-perl-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-http-xslt-filter-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-mail-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.aarch64", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.ppc64le", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.s390x", "AppStream-9.6.0.GA:nginx:1.26:9060020250207002450:9:nginx-mod-stream-debuginfo-2:1.26.3-1.module+el9.6.0+22775+050511e7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nginx: TLS Session Resumption Vulnerability" } ] }
rhsa-2025:7331
Vulnerability from csaf_redhat
Published
2025-05-13 08:50
Modified
2025-06-30 09:56
Summary
Red Hat Security Advisory: nginx security update
Notes
Topic
An update for nginx is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.
Security Fix(es):
* nginx: TLS Session Resumption Vulnerability (CVE-2025-23419)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for nginx is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* nginx: TLS Session Resumption Vulnerability (CVE-2025-23419)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2025:7331", "url": "https://access.redhat.com/errata/RHSA-2025:7331" }, { "category": "external", "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index", "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2344005", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344005" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7331.json" } ], "title": "Red Hat Security Advisory: nginx security update", "tracking": { "current_release_date": "2025-06-30T09:56:53+00:00", "generator": { "date": "2025-06-30T09:56:53+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.3" } }, "id": "RHSA-2025:7331", "initial_release_date": "2025-05-13T08:50:26+00:00", "revision_history": [ { "date": "2025-05-13T08:50:26+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-05-13T08:50:26+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-06-30T09:56:53+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product": { "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::crb" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "nginx-mod-devel-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-devel-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-devel-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-debugsource-2:1.20.1-22.el9.aarch64", "product_id": "nginx-debugsource-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-2:1.20.1-22.el9.aarch64", "product_id": "nginx-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-core-2:1.20.1-22.el9.aarch64", "product_id": "nginx-core-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-mail-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-mail-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.20.1-22.el9.aarch64", "product": { "name": "nginx-mod-stream-2:1.20.1-22.el9.aarch64", "product_id": "nginx-mod-stream-2:1.20.1-22.el9.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.20.1-22.el9?arch=aarch64\u0026epoch=2" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-debugsource-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-debugsource-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-core-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-core-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "product": { "name": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "product_id": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.20.1-22.el9?arch=ppc64le\u0026epoch=2" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nginx-mod-devel-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-devel-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-devel-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-debugsource-2:1.20.1-22.el9.x86_64", "product_id": "nginx-debugsource-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-2:1.20.1-22.el9.x86_64", "product_id": "nginx-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-core-2:1.20.1-22.el9.x86_64", "product_id": "nginx-core-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-mail-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-mail-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.20.1-22.el9.x86_64", "product": { "name": "nginx-mod-stream-2:1.20.1-22.el9.x86_64", "product_id": "nginx-mod-stream-2:1.20.1-22.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.20.1-22.el9?arch=x86_64\u0026epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "nginx-mod-devel-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-devel-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-devel-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-devel@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debugsource-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-debugsource-2:1.20.1-22.el9.s390x", "product_id": "nginx-debugsource-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debugsource@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-2:1.20.1-22.el9.s390x", "product_id": "nginx-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-core-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-core-2:1.20.1-22.el9.s390x", "product_id": "nginx-core-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-core@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-mail-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-mail-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-mail-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-mail@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-mod-stream-2:1.20.1-22.el9.s390x", "product": { "name": "nginx-mod-stream-2:1.20.1-22.el9.s390x", "product_id": "nginx-mod-stream-2:1.20.1-22.el9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-mod-stream@1.20.1-22.el9?arch=s390x\u0026epoch=2" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nginx-2:1.20.1-22.el9.src", "product": { "name": "nginx-2:1.20.1-22.el9.src", "product_id": "nginx-2:1.20.1-22.el9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx@1.20.1-22.el9?arch=src\u0026epoch=2" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "nginx-all-modules-2:1.20.1-22.el9.noarch", "product": { "name": "nginx-all-modules-2:1.20.1-22.el9.noarch", "product_id": "nginx-all-modules-2:1.20.1-22.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-all-modules@1.20.1-22.el9?arch=noarch\u0026epoch=2" } } }, { "category": "product_version", "name": "nginx-filesystem-2:1.20.1-22.el9.noarch", "product": { "name": "nginx-filesystem-2:1.20.1-22.el9.noarch", "product_id": "nginx-filesystem-2:1.20.1-22.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/nginx-filesystem@1.20.1-22.el9?arch=noarch\u0026epoch=2" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.src" }, "product_reference": "nginx-2:1.20.1-22.el9.src", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-2:1.20.1-22.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch" }, "product_reference": "nginx-all-modules-2:1.20.1-22.el9.noarch", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-core-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-core-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-core-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-core-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-2:1.20.1-22.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch" }, "product_reference": "nginx-filesystem-2:1.20.1-22.el9.noarch", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "AppStream-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.src as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.src" }, "product_reference": "nginx-2:1.20.1-22.el9.src", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-all-modules-2:1.20.1-22.el9.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch" }, "product_reference": "nginx-all-modules-2:1.20.1-22.el9.noarch", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-core-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-core-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-core-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-core-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-debugsource-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-debugsource-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-filesystem-2:1.20.1-22.el9.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch" }, "product_reference": "nginx-filesystem-2:1.20.1-22.el9.noarch", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-devel-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-devel-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-mail-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-stream-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "relates_to_product_reference": "CRB-9.6.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)", "product_id": "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64" }, "product_reference": "nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "relates_to_product_reference": "CRB-9.6.0.GA" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-23419", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2025-02-05T18:00:52.408012+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2344005" } ], "notes": [ { "category": "description", "text": "A flaw was found in nginx. When name-based virtual hosts are configured to share the same IP address and port combination with TLS 1.3 and OpenSSL, a previously authenticated attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS session tickets are used, the SSL session cache is used in the default virtual server, and the default virtual server performs client certificate authentication.", "title": "Vulnerability description" }, { "category": "summary", "text": "nginx: TLS Session Resumption Vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "In regulated environments, layered security controls significantly reduce the risk of exploiting this CWE-287: Improper Authentication vulnerability, justifying a severity downgrade from Moderate to Low.\n\nAccess to the platform is granted only after successful authentication through multifactor authentication (MFA). Domain accounts are configured to lock out based on predefined access policies, reducing the effectiveness of brute-force attacks on authentication mechanisms. The platform employs IAM roles for identification and authentication within its cloud infrastructure that govern user access to resources and manage provisioning, deployment, and configuration within the platform environment. This reduces the risk of unauthorized access through third-party or external user accounts. Finally, memory protection mechanisms are used to enhance resilience against unauthorized commands or improper authentication.\n\nThis vulnerability affects NGINX versions 1.11.4 to 1.27.3 and is fixed in 1.27.4 (mainline) and 1.26.3 (stable). RHEL 9 includes a backported fix in the NGINX 1.20 package. In RHEL 8 and 9 modular streams (1.22/1.24), the issue is marked \"Fix deferred\" \u2014 see the FAQ for details. RHEL 10 and later, with NGINX 1.26+, are not affected.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-23419" }, { "category": "external", "summary": "RHBZ#2344005", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344005" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-23419", "url": "https://www.cve.org/CVERecord?id=CVE-2025-23419" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-23419", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23419" }, { "category": "external", "summary": "https://my.f5.com/manage/s/article/K000149173", "url": "https://my.f5.com/manage/s/article/K000149173" } ], "release_date": "2025-02-05T17:31:07.316000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-05-13T08:50:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:7331" }, { "category": "workaround", "details": "Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.", "product_ids": [ "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "AppStream-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "AppStream-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.src", "CRB-9.6.0.GA:nginx-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-all-modules-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-core-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-debugsource-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-filesystem-2:1.20.1-22.el9.noarch", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-devel-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-image-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-perl-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-http-xslt-filter-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-mail-debuginfo-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-2:1.20.1-22.el9.x86_64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.aarch64", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.ppc64le", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.s390x", "CRB-9.6.0.GA:nginx-mod-stream-debuginfo-2:1.20.1-22.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nginx: TLS Session Resumption Vulnerability" } ] }
wid-sec-w-2025-0274
Vulnerability from csaf_certbund
Published
2025-02-05 23:00
Modified
2025-05-12 22:00
Summary
NGINX: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.
NGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software.
Angriff
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in NGINX NGINX Plus und NGINX ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "niedrig" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "NGINX Plus ist die kommerzielle Variante von NGINX, einer Webserver-, Reverse Proxy- und E-Mail Proxy Software.\r\nNGINX ist eine Webserver-, Reverse Proxy- und E-Mail-Proxy Software.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in NGINX NGINX Plus und NGINX ausnutzen, um Sicherheitsvorkehrungen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2025-0274 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0274.json" }, { "category": "self", "summary": "WID-SEC-2025-0274 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0274" }, { "category": "external", "summary": "GitHub Advisory Database vom 2025-02-05", "url": "https://github.com/advisories/GHSA-84xh-pwc6-7g4g" }, { "category": "external", "summary": "nginx-announce vom 2025-02-05", "url": "https://mailman.nginx.org/pipermail/nginx-announce/2025/NYEUJX7NCBCGJGXDFVXNMAAMJDFSE45G.html" }, { "category": "external", "summary": "nginx-announce vom 2025-02-05", "url": "https://mailman.nginx.org/pipermail/nginx-announce/2025/T4FDKDMQ2XNZSA2HIQBJAO4TXNG5V5Q5.html" }, { "category": "external", "summary": "nginx-announce vom 2025-02-05", "url": "https://mailman.nginx.org/pipermail/nginx-announce/2025/U4EOBVNR46CKTAYCY4D6XG4PUSO2OAYZ.html" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000149173" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2025-66EBD291F8 vom 2025-02-06", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-66ebd291f8" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2025-D5A48CFF6D vom 2025-02-06", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-d5a48cff6d" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2025-016ED44DDC vom 2025-02-06", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-016ed44ddc" }, { "category": "external", "summary": "Ubuntu Security Notice USN-7285-1 vom 2025-02-24", "url": "https://ubuntu.com/security/notices/USN-7285-1" }, { "category": "external", "summary": "Debian Security Advisory DLA-4091 vom 2025-03-25", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00017.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALASNGINX1-2025-008 vom 2025-03-26", "url": "https://alas.aws.amazon.com/AL2/ALASNGINX1-2025-008.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-7285-2 vom 2025-04-01", "url": "https://ubuntu.com/security/notices/USN-7285-2" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2025:7331 vom 2025-05-13", "url": "https://access.redhat.com/errata/RHSA-2025:7331" } ], "source_lang": "en-US", "title": "NGINX: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen", "tracking": { "current_release_date": "2025-05-12T22:00:00.000+00:00", "generator": { "date": "2025-05-13T11:16:10.450+00:00", "engine": { "name": "BSI-WID", "version": "1.3.12" } }, "id": "WID-SEC-W-2025-0274", "initial_release_date": "2025-02-05T23:00:00.000+00:00", "revision_history": [ { "date": "2025-02-05T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2025-02-06T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2025-02-24T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2025-03-24T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2025-03-26T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2025-04-01T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2025-05-12T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Red Hat aufgenommen" } ], "status": "final", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "OpenSource \u003c1.27.4", "product": { "name": "NGINX NGINX OpenSource \u003c1.27.4", "product_id": "T040855" } }, { "category": "product_version", "name": "OpenSource 1.27.4", "product": { "name": "NGINX NGINX OpenSource 1.27.4", "product_id": "T040855-fixed", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:opensource__1.27.4" } } }, { "category": "product_version_range", "name": "OpenSource \u003c1.26.3", "product": { "name": "NGINX NGINX OpenSource \u003c1.26.3", "product_id": "T040856" } }, { "category": "product_version", "name": "OpenSource 1.26.3", "product": { "name": "NGINX NGINX OpenSource 1.26.3", "product_id": "T040856-fixed", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx:opensource__1.26.3" } } } ], "category": "product_name", "name": "NGINX" }, { "branches": [ { "category": "product_version_range", "name": "\u003cR33 P2", "product": { "name": "NGINX NGINX Plus \u003cR33 P2", "product_id": "T040849" } }, { "category": "product_version", "name": "R33 P2", "product": { "name": "NGINX NGINX Plus R33 P2", "product_id": "T040849-fixed", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx_plus:r33_p2" } } }, { "category": "product_version_range", "name": "\u003cR32 P2", "product": { "name": "NGINX NGINX Plus \u003cR32 P2", "product_id": "T040852" } }, { "category": "product_version", "name": "R32 P2", "product": { "name": "NGINX NGINX Plus R32 P2", "product_id": "T040852-fixed", "product_identification_helper": { "cpe": "cpe:/a:nginx:nginx_plus:r32_p2" } } } ], "category": "product_name", "name": "NGINX Plus" } ], "category": "vendor", "name": "NGINX" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-23419", "product_status": { "known_affected": [ "T040849", "2951", "67646", "T000126", "T040856", "T040855", "398363", "T040852", "74185" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-23419" } ] }
wid-sec-w-2025-0287
Vulnerability from csaf_certbund
Published
2025-02-05 23:00
Modified
2025-02-23 23:00
Summary
F5 BIG-IP: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.
Angriff
Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebige Systembefehle auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.
Betroffene Betriebssysteme
- F5 Networks
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebige Systembefehle auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuf\u00fchren und einen Denial-of-Service-Zustand zu erzeugen.", "title": "Angriff" }, { "category": "general", "text": "- F5 Networks", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2025-0287 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0287.json" }, { "category": "self", "summary": "WID-SEC-2025-0287 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0287" }, { "category": "external", "summary": "F5 Quarterly Security Notification vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000149540" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000148587" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000138757" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000140578" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000134888" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000138932" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000139780" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000139778" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000140920" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000140933" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000140947" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000140950" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000141003" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000141380" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000148412" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000149185" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000149173" }, { "category": "external", "summary": "F5 Security Advisory vom 2025-02-05", "url": "https://my.f5.com/manage/s/article/K000139656" }, { "category": "external", "summary": "PoC auf GitHub vom 2025-02-23", "url": "https://github.com/mbadanoiu/CVE-2025-20029" } ], "source_lang": "en-US", "title": "F5 BIG-IP: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-02-23T23:00:00.000+00:00", "generator": { "date": "2025-02-24T09:09:22.161+00:00", "engine": { "name": "BSI-WID", "version": "1.3.12" } }, "id": "WID-SEC-W-2025-0287", "initial_release_date": "2025-02-05T23:00:00.000+00:00", "revision_history": [ { "date": "2025-02-05T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2025-02-06T23:00:00.000+00:00", "number": "2", "summary": "CVSS korrigiert" }, { "date": "2025-02-23T23:00:00.000+00:00", "number": "3", "summary": "PoC aufgenommen und Bewertung angepasst" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "F5 BIG-IP", "product": { "name": "F5 BIG-IP", "product_id": "T040887", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip:-" } } } ], "category": "vendor", "name": "F5" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-20029", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-20029" }, { "cve": "CVE-2025-20045", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-20045" }, { "cve": "CVE-2025-20058", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-20058" }, { "cve": "CVE-2025-21087", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-21087" }, { "cve": "CVE-2025-21091", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-21091" }, { "cve": "CVE-2025-22846", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-22846" }, { "cve": "CVE-2025-22891", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-22891" }, { "cve": "CVE-2025-23239", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-23239" }, { "cve": "CVE-2025-23412", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-23412" }, { "cve": "CVE-2025-23413", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-23413" }, { "cve": "CVE-2025-23415", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-23415" }, { "cve": "CVE-2025-23419", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-23419" }, { "cve": "CVE-2025-24312", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-24312" }, { "cve": "CVE-2025-24319", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-24319" }, { "cve": "CVE-2025-24320", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-24320" }, { "cve": "CVE-2025-24326", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-24326" }, { "cve": "CVE-2025-24497", "product_status": { "known_affected": [ "T040887" ] }, "release_date": "2025-02-05T23:00:00.000+00:00", "title": "CVE-2025-24497" } ] }
ncsc-2025-0041
Vulnerability from csaf_ncscnl
Published
2025-02-07 07:38
Modified
2025-02-11 06:51
Summary
Kwetsbaarheden verholpen in F5 BIG-IP
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
F5 heeft kwetsbaarheden verholpen in BIG-IP.
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Omzeilen van een beveiligingsmaatregel
- Uitvoer van willekeurige code (Root/admin)
- Uitvoer van willekeurige code (Gebruiker)
- Toegang tot gevoelige gegevens
Oplossingen
F5 heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-772
Missing Release of Resource after Effective Lifetime
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-311
Missing Encryption of Sensitive Data
CWE-426
Untrusted Search Path
CWE-345
Insufficient Verification of Data Authenticity
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-190
Integer Overflow or Wraparound
CWE-693
Protection Mechanism Failure
CWE-125
Out-of-bounds Read
CWE-401
Missing Release of Memory after Effective Lifetime
CWE-476
NULL Pointer Dereference
CWE-400
Uncontrolled Resource Consumption
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-787
Out-of-bounds Write
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-20
Improper Input Validation
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "F5 heeft kwetsbaarheden verholpen in BIG-IP.", "title": "Feiten" }, { "category": "description", "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Omzeilen van een beveiligingsmaatregel\n- Uitvoer van willekeurige code (Root/admin)\n- Uitvoer van willekeurige code (Gebruiker)\n- Toegang tot gevoelige gegevens", "title": "Interpretaties" }, { "category": "description", "text": "F5 heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "general", "text": "Time-of-check Time-of-use (TOCTOU) Race Condition", "title": "CWE-367" }, { "category": "general", "text": "Missing Encryption of Sensitive Data", "title": "CWE-311" }, { "category": "general", "text": "Untrusted Search Path", "title": "CWE-426" }, { "category": "general", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Protection Mechanism Failure", "title": "CWE-693" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000138757" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000138932" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000139656" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000139778" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000140578" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000140920" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000140933" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000140947" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000140950" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000141003" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://my.f5.com/manage/s/article/K000148587" } ], "title": "Kwetsbaarheden verholpen in F5 BIG-IP", "tracking": { "current_release_date": "2025-02-11T06:51:17.629249Z", "id": "NCSC-2025-0041", "initial_release_date": "2025-02-07T07:38:11.981975Z", "revision_history": [ { "date": "2025-02-07T07:38:11.981975Z", "number": "0", "summary": "Initiele versie" }, { "date": "2025-02-11T06:51:17.629249Z", "number": "1", "summary": "Door een technisch issue is deze advisory eerder verstuurd met een invalide signature, waardoor automatische verwerking mogelijk verstoord is. Deze update verhelpt dat. Er is verder geen inhoudelijke wijziging." } ], "status": "final", "version": "1.0.1" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "big-ip", "product": { "name": "big-ip", "product_id": "CSAFPID-310988", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "big-ip_next", "product": { "name": "big-ip_next", "product_id": "CSAFPID-636427", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:big-ip_next:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "big-ip_next_central_manager", "product": { "name": "big-ip_next_central_manager", "product_id": "CSAFPID-1620063", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:big-ip_next_central_manager:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "big-ip_next_cnf", "product": { "name": "big-ip_next_cnf", "product_id": "CSAFPID-636429", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:big-ip_next_cnf:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "big-ip_next_spk", "product": { "name": "big-ip_next_spk", "product_id": "CSAFPID-636428", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:big-ip_next_spk:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nginx_open_source", "product": { "name": "nginx_open_source", "product_id": "CSAFPID-842689", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "nginx_plus", "product": { "name": "nginx_plus", "product_id": "CSAFPID-842688", "product_identification_helper": { "cpe": "cpe:2.3:a:f5:nginx_plus:*:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "f5" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-0064", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2014-0064", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2014/CVE-2014-0064.json" } ], "title": "CVE-2014-0064" }, { "cve": "CVE-2014-0065", "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2014-0065", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2014/CVE-2014-0065.json" } ], "title": "CVE-2014-0065" }, { "cve": "CVE-2014-0066", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2014-0066", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2014/CVE-2014-0066.json" } ], "title": "CVE-2014-0066" }, { "cve": "CVE-2014-0067", "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2014-0067", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2014/CVE-2014-0067.json" } ], "title": "CVE-2014-0067" }, { "cve": "CVE-2019-5010", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2019-5010", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2019/CVE-2019-5010.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2019-5010" }, { "cve": "CVE-2019-16056", "cwe": { "id": "CWE-311", "name": "Missing Encryption of Sensitive Data" }, "notes": [ { "category": "other", "text": "Missing Encryption of Sensitive Data", "title": "CWE-311" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2019-16056", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2019/CVE-2019-16056.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2019-16056" }, { "cve": "CVE-2022-26488", "cwe": { "id": "CWE-426", "name": "Untrusted Search Path" }, "notes": [ { "category": "other", "text": "Untrusted Search Path", "title": "CWE-426" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2022-26488", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-26488.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.0, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2022-26488" }, { "cve": "CVE-2024-36242", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "other", "text": "Protection Mechanism Failure", "title": "CWE-693" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2024-36242", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36242.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2024-36242" }, { "cve": "CVE-2024-38660", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "notes": [ { "category": "other", "text": "Protection Mechanism Failure", "title": "CWE-693" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38660", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38660.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2024-38660" }, { "cve": "CVE-2024-56337", "cwe": { "id": "CWE-367", "name": "Time-of-check Time-of-use (TOCTOU) Race Condition" }, "notes": [ { "category": "other", "text": "Time-of-check Time-of-use (TOCTOU) Race Condition", "title": "CWE-367" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2024-56337", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56337.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2024-56337" }, { "cve": "CVE-2025-20029", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)", "title": "CWE-78" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-20029", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20029.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-20029" }, { "cve": "CVE-2025-20045", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-20045", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20045.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-20045" }, { "cve": "CVE-2025-20058", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-20058", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20058.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-20058" }, { "cve": "CVE-2025-21087", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21087", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21087.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-21087" }, { "cve": "CVE-2025-21091", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-21091", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21091.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-21091" }, { "cve": "CVE-2025-22846", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-22846", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-22846.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-22846" }, { "cve": "CVE-2025-22891", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-22891", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-22891.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-22891" }, { "cve": "CVE-2025-23239", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)", "title": "CWE-77" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-23239", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23239.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-23239" }, { "cve": "CVE-2025-23412", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-23412", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23412.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-23412" }, { "cve": "CVE-2025-23413", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "notes": [ { "category": "other", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-23413", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23413.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-23413" }, { "cve": "CVE-2025-23415", "cwe": { "id": "CWE-345", "name": "Insufficient Verification of Data Authenticity" }, "notes": [ { "category": "other", "text": "Insufficient Verification of Data Authenticity", "title": "CWE-345" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-23415", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23415.json" } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-23415" }, { "cve": "CVE-2025-23419", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "other", "text": "Improper Authentication", "title": "CWE-287" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-23419", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23419.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-23419" }, { "cve": "CVE-2025-24312", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "other", "text": "Allocation of Resources Without Limits or Throttling", "title": "CWE-770" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24312", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24312.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-24312" }, { "cve": "CVE-2025-24319", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24319", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24319.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-24319" }, { "cve": "CVE-2025-24320", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)", "title": "CWE-79" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24320", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24320.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.0, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-24320" }, { "cve": "CVE-2025-24326", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24326", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24326.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-24326" }, { "cve": "CVE-2025-24497", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] }, "references": [ { "category": "self", "summary": "CVE-2025-24497", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24497.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-310988", "CSAFPID-636427", "CSAFPID-1620063", "CSAFPID-636429", "CSAFPID-636428", "CSAFPID-842689", "CSAFPID-842688" ] } ], "title": "CVE-2025-24497" } ] }
ghsa-84xh-pwc6-7g4g
Vulnerability from github
Published
2025-02-05 18:34
Modified
2025-02-05 21:32
Severity ?
4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
5.3 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
5.3 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
VLAI Severity ?
Details
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
{ "affected": [], "aliases": [ "CVE-2025-23419" ], "database_specific": { "cwe_ids": [ "CWE-287" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-05T18:15:33Z", "severity": "MODERATE" }, "details": "When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication.\u00a0\u00a0\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "id": "GHSA-84xh-pwc6-7g4g", "modified": "2025-02-05T21:32:35Z", "published": "2025-02-05T18:34:46Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23419" }, { "type": "WEB", "url": "https://my.f5.com/manage/s/article/K000149173" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2025/02/05/8" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "type": "CVSS_V3" }, { "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "type": "CVSS_V4" } ] }
opensuse-su-2025:14737-1
Vulnerability from csaf_opensuse
Published
2025-02-06 00:00
Modified
2025-02-06 00:00
Summary
nginx-1.27.4-1.1 on GA media
Notes
Title of the patch
nginx-1.27.4-1.1 on GA media
Description of the patch
These are all security issues fixed in the nginx-1.27.4-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-14737
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "nginx-1.27.4-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the nginx-1.27.4-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2025-14737", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14737-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2025-23419 page", "url": "https://www.suse.com/security/cve/CVE-2025-23419/" } ], "title": "nginx-1.27.4-1.1 on GA media", "tracking": { "current_release_date": "2025-02-06T00:00:00Z", "generator": { "date": "2025-02-06T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2025:14737-1", "initial_release_date": "2025-02-06T00:00:00Z", "revision_history": [ { "date": "2025-02-06T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "nginx-1.27.4-1.1.aarch64", "product": { "name": "nginx-1.27.4-1.1.aarch64", "product_id": "nginx-1.27.4-1.1.aarch64" } }, { "category": "product_version", "name": "nginx-source-1.27.4-1.1.aarch64", "product": { "name": "nginx-source-1.27.4-1.1.aarch64", "product_id": "nginx-source-1.27.4-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "nginx-1.27.4-1.1.ppc64le", "product": { "name": "nginx-1.27.4-1.1.ppc64le", "product_id": "nginx-1.27.4-1.1.ppc64le" } }, { "category": "product_version", "name": "nginx-source-1.27.4-1.1.ppc64le", "product": { "name": "nginx-source-1.27.4-1.1.ppc64le", "product_id": "nginx-source-1.27.4-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "nginx-1.27.4-1.1.s390x", "product": { "name": "nginx-1.27.4-1.1.s390x", "product_id": "nginx-1.27.4-1.1.s390x" } }, { "category": "product_version", "name": "nginx-source-1.27.4-1.1.s390x", "product": { "name": "nginx-source-1.27.4-1.1.s390x", "product_id": "nginx-source-1.27.4-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "nginx-1.27.4-1.1.x86_64", "product": { "name": "nginx-1.27.4-1.1.x86_64", "product_id": "nginx-1.27.4-1.1.x86_64" } }, { "category": "product_version", "name": "nginx-source-1.27.4-1.1.x86_64", "product": { "name": "nginx-source-1.27.4-1.1.x86_64", "product_id": "nginx-source-1.27.4-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nginx-1.27.4-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-1.27.4-1.1.aarch64" }, "product_reference": "nginx-1.27.4-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1.27.4-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-1.27.4-1.1.ppc64le" }, "product_reference": "nginx-1.27.4-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1.27.4-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-1.27.4-1.1.s390x" }, "product_reference": "nginx-1.27.4-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-1.27.4-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-1.27.4-1.1.x86_64" }, "product_reference": "nginx-1.27.4-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-source-1.27.4-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.aarch64" }, "product_reference": "nginx-source-1.27.4-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-source-1.27.4-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.ppc64le" }, "product_reference": "nginx-source-1.27.4-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-source-1.27.4-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.s390x" }, "product_reference": "nginx-source-1.27.4-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nginx-source-1.27.4-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.x86_64" }, "product_reference": "nginx-source-1.27.4-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-23419", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-23419" } ], "notes": [ { "category": "general", "text": "When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key are used and/or the SSL session cache https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache are used in the default server and the default server is performing client certificate authentication. \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:nginx-1.27.4-1.1.aarch64", "openSUSE Tumbleweed:nginx-1.27.4-1.1.ppc64le", "openSUSE Tumbleweed:nginx-1.27.4-1.1.s390x", "openSUSE Tumbleweed:nginx-1.27.4-1.1.x86_64", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.aarch64", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.ppc64le", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.s390x", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-23419", "url": "https://www.suse.com/security/cve/CVE-2025-23419" }, { "category": "external", "summary": "SUSE Bug 1236851 for CVE-2025-23419", "url": "https://bugzilla.suse.com/1236851" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:nginx-1.27.4-1.1.aarch64", "openSUSE Tumbleweed:nginx-1.27.4-1.1.ppc64le", "openSUSE Tumbleweed:nginx-1.27.4-1.1.s390x", "openSUSE Tumbleweed:nginx-1.27.4-1.1.x86_64", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.aarch64", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.ppc64le", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.s390x", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:nginx-1.27.4-1.1.aarch64", "openSUSE Tumbleweed:nginx-1.27.4-1.1.ppc64le", "openSUSE Tumbleweed:nginx-1.27.4-1.1.s390x", "openSUSE Tumbleweed:nginx-1.27.4-1.1.x86_64", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.aarch64", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.ppc64le", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.s390x", "openSUSE Tumbleweed:nginx-source-1.27.4-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-02-06T00:00:00Z", "details": "moderate" } ], "title": "CVE-2025-23419" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…