Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0204-1

Опубликовано: 11 фев. 2020
Источник: suse-cvrf

Описание

Security update for nginx

This update for nginx fixes the following issues:

  • CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page configurations which could have allowed unauthorized web page reads (bsc#1160682).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.1
nginx-1.14.2-lp151.4.6.1
nginx-source-1.14.2-lp151.4.6.1
vim-plugin-nginx-1.14.2-lp151.4.6.1

Ссылки

Описание

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

Затронутые продукты
openSUSE Leap 15.1:nginx-1.14.2-lp151.4.6.1
openSUSE Leap 15.1:nginx-source-1.14.2-lp151.4.6.1
openSUSE Leap 15.1:vim-plugin-nginx-1.14.2-lp151.4.6.1
Ссылки