NGINX and F5 shipped NGINX 1.30.6 and 1.31.7 on October 14 to fix five flaws, including three memory bugs, a TLS session-ticket bug, and an HTTP/3 request issue. F5 says each one depends on a specific configuration, and neither company reported active exploitation or a CISA Known Exploited Vulnerabilities listing.
The TLS flaw sits in automatic session-ticket rotation for shared TLS session caches: NGINX copied only two of three key slots, leaving stale memory in the third slot, so a ticket tied to that slot could be accepted when client-certificate checks should have stopped it. The other bugs need similarly uncommon directives, such as alias plus rewrite, regex map captures, or AIO with SSI, which means the exposure is concentrated in fleets that opted into those features.
For operators, the important part is not the length of the patch list but the configuration gate in front of it. If a deployment uses one of those directives, a niche-looking setting can carry worker crashes, possible code execution, client-cert bypass, or backend request smuggling that survives until the affected component is updated.
CVEs in this update
6 CVEs
Across NGINX Plus, NGINX, NGINX Open Source, and related packages.
Juniper heeft meerdere kwetsbaarheden verholpen in Junos OS. De kwetsbaarheden bevinden zich in verschillende componenten van Junos OS, waaronder de VXLAN Gateway Daemon (vgd), kmd op MX Series routers, SDK service met JDAF routing, TWAMP client (rmopd service), gRPC library, ipfd daemon op SRX Series, dot1x daemon op Fusion Aggregation Devices, routing...
Juniper Networks ha rilasciato aggiornamenti per risolvere numerose vulnerabilità, di cui 23 con gravità "critica" e 119 con gravità “alta”, nei sistemi operativi Junos OS e Junos OS Evolved.