< back to search

shield Security update for nginx

SUSE-SLE-Module-Server-Applications-15-SP7-2025-3444

This update for nginx fixes the following issues: - CVE-2025-53859: the server side may leak arbitrary bytes during the NGINX SMTP authentication process (bsc#1248070). - CVE-2025-23419: session resumption can bypass client certificate authentication requirements using TLSv1.3 (bsc#1236851).

Release Date

Oct 1 2025
References

Bugzilla: 1236851, 1248070
CVEs: CVE-2025-53859, CVE-2025-23419
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.7 ppc64le

Packages

nginx
A HTTP server and IMAP/POP3 proxy server

1.21.5-150600.10.12.1 lock rpm lock src

nginx-source
The nginx source

1.21.5-150600.10.12.1 lock rpm

Server Applications Module 15.7 aarch64

Packages

nginx
A HTTP server and IMAP/POP3 proxy server

1.21.5-150600.10.12.1 lock rpm lock src

nginx-source
The nginx source

1.21.5-150600.10.12.1 lock rpm

Server Applications Module 15.7 s390x

Packages

nginx
A HTTP server and IMAP/POP3 proxy server

1.21.5-150600.10.12.1 lock rpm lock src

nginx-source
The nginx source

1.21.5-150600.10.12.1 lock rpm

Server Applications Module 15.7 x86_64

Packages

nginx
A HTTP server and IMAP/POP3 proxy server

1.21.5-150600.10.12.1 lock rpm lock src

nginx-source
The nginx source

1.21.5-150600.10.12.1 lock rpm