SUSE-SU-2020:1171-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:1171-1

Related

Published

2020-05-04T15:06:28Z

Modified

2020-05-04T15:06:28Z

Summary

Security update for nginx

Details

This update for nginx fixes the following issues:

nginx was updated to 1.16.1 (jsc#ECO-1401)

Added TLS 1.3 support (jsc#SLE-9295, bsc#1150711)
Replaced obsolete GeoIP module with MaxMinDB-based GeoIP2 (jsc#SLE-11184, bsc#1156202)
Started nginx after network is online (bsc#1155690)
CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page configurations which could have allowed unauthorized web page reads (bsc#1160682).

References

Affected packages

Name: nginx
Purl: purl:rpm/suse/nginx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.1-3.12.7

{
    "binaries": [
        {
            "nginx": "1.16.1-3.12.7"
        }
    ]
}

Name: nginx
Purl: purl:rpm/suse/nginx&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.1-3.12.7

{
    "binaries": [
        {
            "nginx": "1.16.1-3.12.7"
        }
    ]
}

Name: nginx
Purl: purl:rpm/suse/nginx&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.1-3.12.7

{
    "binaries": [
        {
            "nginx": "1.16.1-3.12.7"
        }
    ]
}

Name: nginx
Purl: purl:rpm/suse/nginx&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.1-3.12.7

{
    "binaries": [
        {
            "nginx": "1.16.1-3.12.7"
        }
    ]
}