NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX has released versions 1.30.6 and 1.31.7 fixing five vulnerabilities, including three memory bugs F5 scores as critical that could crash a worker process or possibly allow code execution, The Hacker News reports. A fourth flaw lets an attacker forge a TLS session that could bypass client-certificate checks; none of the five is reported exploited, and each requires a specific configuration to exploit.