NGINX Patches 5 Flaws, Including Possible RCE and TLS Bug

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities. Three memory bugs could crash a worker process or enable code execution, while a TLS flaw may let attackers skip client-certificate checks; one flaw has been present since May 2005.

• NGINX 1.30.6 and 1.31.7 released on October 14
• Three memory bugs could crash a worker or allow code execution
• TLS bug may let attackers forge a session and skip client-cert checks
• One flaw has existed in every release since May 2005