Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | nginx: backport fix for CVE-2019-20372 | Ralph Siemsen | 2022-03-27 | 1 | -0/+39 |
Fixed an HTTP request smuggling with certain error_page configurations which could have allowed unauthorized web page reads. This issue affects nginx prior to 1.17.7, so only the recipe for 1.16.1 needs the patch applied. Fix is taken directly from https://github.com/nginx/nginx/commit/c1be55f97211d38b69ac0c2027e6812ab8b1b94e Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> |