MGASA-2025-0245

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2025-0245.html
Import Source
https://advisories.mageia.org/MGASA-2025-0245.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2025-0245
Related
Published
2025-10-22T20:07:31Z
Modified
2025-10-22T19:31:51Z
Summary
Updated nginx package fixes security vulnerability
Details

It was discovered that nginx contains a security issue in the ngxmailsmtp_module which might allow an attacker to cause buffer over-read potentially resulting in sensitive information leak in a HTTP request to the authentication server (CVE-2025-53859).

References
Credits

Affected packages

Mageia:9 / nginx

Package

Name
nginx
Purl
pkg:rpm/mageia/nginx?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.26.3-1.1.mga9

Ecosystem specific 

{
    "section": "core"
}