Описание
Security update for nginx
This update for nginx fixes the following issues:
- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page configurations which could have allowed unauthorized web page reads (bsc#1160682).
Список пакетов
SUSE Linux Enterprise Module for Server Applications 15 SP1
nginx-1.14.2-6.7.1
nginx-source-1.14.2-6.7.1
Ссылки
- Link for SUSE-SU-2020:0348-1
- E-Mail link for SUSE-SU-2020:0348-1
- SUSE Security Ratings
- SUSE Bug 1160682
- SUSE CVE CVE-2019-20372 page
Описание
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.
Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15 SP1:nginx-1.14.2-6.7.1
SUSE Linux Enterprise Module for Server Applications 15 SP1:nginx-source-1.14.2-6.7.1
Ссылки
- CVE-2019-20372
- SUSE Bug 1160682