Red Hat Security AdvisoryRHSA-2020:2817
rh-nginx116-nginx security update
Released 2020-07-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-nginx116-nginx-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-image-filter-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-perl-1:1.16.1-4.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-nginx116-nginx-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-image-filter-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-perl-1:1.16.1-4.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-nginx116-nginx-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-image-filter-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-perl-1:1.16.1-4.el7.1 +3
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-nginx116-nginx-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-image-filter-1:1.16.1-4.el7.1, rh-nginx116-nginx-mod-http-perl-1:1.16.1-4.el7.1 +3
Fixes 1 record
Priority MEDIUM 40
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a l…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.14961 · Published 2020-01-09 · Partial fix CWE-444
