Stay Secure with the Latest Linux Advisories

security advisorynginxHTTP request

Mageia 7: 2020-0231 Critical: Nginx HTTP Request Smuggling Issue

Nginx was updated due to the following vulnerabilities: ngx_http_special_response.c: With a certain error_page configuration, HTTP request smuggling is possible. Thus, an attacker may be able to read unauthorized web pages at times when NGINX is being fronted by a load balancer. (CVE-2019-20372). . MGASA-2020-0231 - Updated nginx packages fix security vulnerability Publication date: 27 May 2020 URL: https://advisories.mageia.org/MGASA-2020-0231.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-20372 Nginx was updated due to the following vulnerabilities: ngx_http_special_response.c: With a certain error_page configuration, HTTP request smuggling is possible. Thus, an attacker may be able to read unauthorized web pages at times when NGINX is being fronted by a load balancer. (CVE-2019-20372). References: - https://bugs.mageia.org/show_bug.cgi?id=26086 - https://ubuntu.com/security/notices/USN-4235-1 - https://www.cve.org/CVERecord?id=CVE-2019-20372 SRPMS: - 7/core/nginx-1.16.1-1.2.mga7 . Security updates for Nginx packages address vulnerabilities that allowed unauthorized access. Discover more about this critical patch.. Nginx Security Update,Mageia Advisory,HTTP Smuggling,Web Server Vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

May 27, 2020 •Critical Mageia