HCE2-SA-2024-0286 Moderate HCE 2.0 Security Fix(es): NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx_http_mp4_module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted mp4 file with the ngx_http_mp4_module.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. (CVE-2024-7347) HCE 2.0 nginx-1.21.5-5.r2.hce2.aarch64.rpm nginx-all-modules-1.21.5-5.r2.hce2.noarch.rpm nginx-filesystem-1.21.5-5.r2.hce2.noarch.rpm nginx-help-1.21.5-5.r2.hce2.noarch.rpm nginx-mod-devel-1.21.5-5.r2.hce2.aarch64.rpm nginx-mod-http-image-filter-1.21.5-5.r2.hce2.aarch64.rpm nginx-mod-http-perl-1.21.5-5.r2.hce2.aarch64.rpm nginx-mod-http-xslt-filter-1.21.5-5.r2.hce2.aarch64.rpm nginx-mod-mail-1.21.5-5.r2.hce2.aarch64.rpm nginx-mod-stream-1.21.5-5.r2.hce2.aarch64.rpm nginx-1.21.5-5.r2.hce2.x86_64.rpm nginx-mod-devel-1.21.5-5.r2.hce2.x86_64.rpm nginx-mod-http-image-filter-1.21.5-5.r2.hce2.x86_64.rpm nginx-mod-http-perl-1.21.5-5.r2.hce2.x86_64.rpm nginx-mod-http-xslt-filter-1.21.5-5.r2.hce2.x86_64.rpm nginx-mod-mail-1.21.5-5.r2.hce2.x86_64.rpm nginx-mod-stream-1.21.5-5.r2.hce2.x86_64.rpm