Oval Definition:	oval:org.opensuse.security:def:53342
Revision Date: 2020-12-01 Version: 1 Title: Security update for nginx (Moderate) Description: This update for nginx fixes the following issues: - CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page configurations which could have allowed unauthorized web page reads (bsc#1160682). Family: unix Class: patch Status: Reference(s): 1000102 1015351 1024145 1039361 1047178 1047873 1057247 1057721 1057724 1066295 1159922 1159923 1159924 1159927 1160682 879179 912214 929678 931698 933898 933911 934487 934489 934491 934493 981124 987553 999735 CVE-2009-3736 CVE-2010-2529 CVE-2010-4651 CVE-2012-4510 CVE-2014-0250 CVE-2014-0791 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9556 CVE-2014-9636 CVE-2015-1196 CVE-2015-1395 CVE-2015-1396 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-3216 CVE-2015-4000 CVE-2016-4324 CVE-2017-1000367 CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12837 CVE-2017-12883 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900 CVE-2017-12901 CVE-2017-12902 CVE-2017-12985 CVE-2017-12986 CVE-2017-12987 CVE-2017-12988 CVE-2017-12989 CVE-2017-12990 CVE-2017-12991 CVE-2017-12992 CVE-2017-12993 CVE-2017-12994 CVE-2017-12995 CVE-2017-12996 CVE-2017-12997 CVE-2017-12998 CVE-2017-12999 CVE-2017-13000 CVE-2017-13001 CVE-2017-13002 CVE-2017-13003 CVE-2017-13004 CVE-2017-13005 CVE-2017-13006 CVE-2017-13007 CVE-2017-13008 CVE-2017-13009 CVE-2017-13010 CVE-2017-13011 CVE-2017-13012 CVE-2017-13013 CVE-2017-13014 CVE-2017-13015 CVE-2017-13016 CVE-2017-13017 CVE-2017-13018 CVE-2017-13019 CVE-2017-13020 CVE-2017-13021 CVE-2017-13022 CVE-2017-13023 CVE-2017-13024 CVE-2017-13025 CVE-2017-13026 CVE-2017-13027 CVE-2017-13028 CVE-2017-13029 CVE-2017-13030 CVE-2017-13031 CVE-2017-13032 CVE-2017-13033 CVE-2017-13034 CVE-2017-13035 CVE-2017-13036 CVE-2017-13037 CVE-2017-13038 CVE-2017-13039 CVE-2017-13040 CVE-2017-13041 CVE-2017-13042 CVE-2017-13043 CVE-2017-13044 CVE-2017-13045 CVE-2017-13046 CVE-2017-13047 CVE-2017-13048 CVE-2017-13049 CVE-2017-13050 CVE-2017-13051 CVE-2017-13052 CVE-2017-13053 CVE-2017-13054 CVE-2017-13055 CVE-2017-13080 CVE-2017-13081 CVE-2017-13687 CVE-2017-13688 CVE-2017-13689 CVE-2017-13690 CVE-2017-13725 CVE-2017-6512 CVE-2018-0739 CVE-2019-11045 CVE-2019-11046 CVE-2019-11047 CVE-2019-11050 CVE-2019-20372 SUSE-SU-2015:0366-1 SUSE-SU-2015:1150-1 SUSE-SU-2016:2472-1 SUSE-SU-2017:1446-1 SUSE-SU-2017:2854-1 SUSE-SU-2017:3092-1 SUSE-SU-2017:3106-1 SUSE-SU-2020:0101-1 SUSE-SU-2020:0348-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information aaa_base-84.87+git20180409.04c9dae-lp150.1 is installed OR aaa_base-extras-84.87+git20180409.04c9dae-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information chromedriver-75.0.3770.80-lp151.2.6 is installed OR chromium-75.0.3770.80-lp151.2.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information freetype2-2.3.7-25.32 is installed OR freetype2-32bit-2.3.7-25.32 is installed OR freetype2-devel-2.3.7-25.32 is installed OR ft2demos-2.3.7-25.32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-9.9.6P1-0.15 is installed OR bind-libs-9.9.6P1-0.15 is installed OR bind-libs-32bit-9.9.6P1-0.15 is installed OR bind-utils-9.9.6P1-0.15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information krb5-1.6.3-133.49.68 is installed OR krb5-32bit-1.6.3-133.49.68 is installed OR krb5-client-1.6.3-133.49.68 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information compat-openssl098-0.9.8j-78 is installed OR libopenssl0_9_8-0.9.8j-78 is installed OR libopenssl0_9_8-32bit-0.9.8j-78 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libreoffice-5.1.5.2-29 is installed OR libreoffice-base-5.1.5.2-29 is installed OR libreoffice-base-drivers-mysql-5.1.5.2-29 is installed OR libreoffice-base-drivers-postgresql-5.1.5.2-29 is installed OR libreoffice-calc-5.1.5.2-29 is installed OR libreoffice-calc-extensions-5.1.5.2-29 is installed OR libreoffice-draw-5.1.5.2-29 is installed OR libreoffice-filters-optional-5.1.5.2-29 is installed OR libreoffice-gnome-5.1.5.2-29 is installed OR libreoffice-icon-theme-galaxy-5.1.5.2-29 is installed OR libreoffice-icon-theme-tango-5.1.5.2-29 is installed OR libreoffice-impress-5.1.5.2-29 is installed OR libreoffice-l10n-af-5.1.5.2-29 is installed OR libreoffice-l10n-ar-5.1.5.2-29 is installed OR libreoffice-l10n-ca-5.1.5.2-29 is installed OR libreoffice-l10n-cs-5.1.5.2-29 is installed OR libreoffice-l10n-da-5.1.5.2-29 is installed OR libreoffice-l10n-de-5.1.5.2-29 is installed OR libreoffice-l10n-en-5.1.5.2-29 is installed OR libreoffice-l10n-es-5.1.5.2-29 is installed OR libreoffice-l10n-fi-5.1.5.2-29 is installed OR libreoffice-l10n-fr-5.1.5.2-29 is installed OR libreoffice-l10n-gu-5.1.5.2-29 is installed OR libreoffice-l10n-hi-5.1.5.2-29 is installed OR libreoffice-l10n-hu-5.1.5.2-29 is installed OR libreoffice-l10n-it-5.1.5.2-29 is installed OR libreoffice-l10n-ja-5.1.5.2-29 is installed OR libreoffice-l10n-ko-5.1.5.2-29 is installed OR libreoffice-l10n-nb-5.1.5.2-29 is installed OR libreoffice-l10n-nl-5.1.5.2-29 is installed OR libreoffice-l10n-nn-5.1.5.2-29 is installed OR libreoffice-l10n-pl-5.1.5.2-29 is installed OR libreoffice-l10n-pt-BR-5.1.5.2-29 is installed OR libreoffice-l10n-pt-PT-5.1.5.2-29 is installed OR libreoffice-l10n-ru-5.1.5.2-29 is installed OR libreoffice-l10n-sk-5.1.5.2-29 is installed OR libreoffice-l10n-sv-5.1.5.2-29 is installed OR libreoffice-l10n-xh-5.1.5.2-29 is installed OR libreoffice-l10n-zh-Hans-5.1.5.2-29 is installed OR libreoffice-l10n-zh-Hant-5.1.5.2-29 is installed OR libreoffice-l10n-zu-5.1.5.2-29 is installed OR libreoffice-mailmerge-5.1.5.2-29 is installed OR libreoffice-math-5.1.5.2-29 is installed OR libreoffice-officebean-5.1.5.2-29 is installed OR libreoffice-pyuno-5.1.5.2-29 is installed OR libreoffice-writer-5.1.5.2-29 is installed OR libreoffice-writer-extensions-5.1.5.2-29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND unzip-6.00-32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-11 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information cups-pk-helper-0.2.5-5 is installed OR cups-pk-helper-lang-0.2.5-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information nginx-1.14.2-6.7 is installed OR nginx-source-1.14.2-6.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.49 is installed OR php7-7.2.5-4.49 is installed OR php7-bcmath-7.2.5-4.49 is installed OR php7-bz2-7.2.5-4.49 is installed OR php7-calendar-7.2.5-4.49 is installed OR php7-ctype-7.2.5-4.49 is installed OR php7-curl-7.2.5-4.49 is installed OR php7-dba-7.2.5-4.49 is installed OR php7-devel-7.2.5-4.49 is installed OR php7-dom-7.2.5-4.49 is installed OR php7-enchant-7.2.5-4.49 is installed OR php7-exif-7.2.5-4.49 is installed OR php7-fastcgi-7.2.5-4.49 is installed OR php7-fileinfo-7.2.5-4.49 is installed OR php7-fpm-7.2.5-4.49 is installed OR php7-ftp-7.2.5-4.49 is installed OR php7-gd-7.2.5-4.49 is installed OR php7-gettext-7.2.5-4.49 is installed OR php7-gmp-7.2.5-4.49 is installed OR php7-iconv-7.2.5-4.49 is installed OR php7-intl-7.2.5-4.49 is installed OR php7-json-7.2.5-4.49 is installed OR php7-ldap-7.2.5-4.49 is installed OR php7-mbstring-7.2.5-4.49 is installed OR php7-mysql-7.2.5-4.49 is installed OR php7-odbc-7.2.5-4.49 is installed OR php7-opcache-7.2.5-4.49 is installed OR php7-openssl-7.2.5-4.49 is installed OR php7-pcntl-7.2.5-4.49 is installed OR php7-pdo-7.2.5-4.49 is installed OR php7-pear-7.2.5-4.49 is installed OR php7-pear-Archive_Tar-7.2.5-4.49 is installed OR php7-pgsql-7.2.5-4.49 is installed OR php7-phar-7.2.5-4.49 is installed OR php7-posix-7.2.5-4.49 is installed OR php7-shmop-7.2.5-4.49 is installed OR php7-snmp-7.2.5-4.49 is installed OR php7-soap-7.2.5-4.49 is installed OR php7-sockets-7.2.5-4.49 is installed OR php7-sodium-7.2.5-4.49 is installed OR php7-sqlite-7.2.5-4.49 is installed OR php7-sysvmsg-7.2.5-4.49 is installed OR php7-sysvsem-7.2.5-4.49 is installed OR php7-sysvshm-7.2.5-4.49 is installed OR php7-tokenizer-7.2.5-4.49 is installed OR php7-wddx-7.2.5-4.49 is installed OR php7-xmlreader-7.2.5-4.49 is installed OR php7-xmlrpc-7.2.5-4.49 is installed OR php7-xmlwriter-7.2.5-4.49 is installed OR php7-xsl-7.2.5-4.49 is installed OR php7-zip-7.2.5-4.49 is installed OR php7-zlib-7.2.5-4.49 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information fetchmail-6.3.26-5 is installed OR fetchmailconf-6.3.26-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libxml2-2-2.9.4-27 is installed OR libxml2-2-32bit-2.9.4-27 is installed OR libxml2-doc-2.9.4-27 is installed OR libxml2-tools-2.9.4-27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libpython3_4m1_0-3.4.6-25.24 is installed OR python3-3.4.6-25.24 is installed OR python3-base-3.4.6-25.24 is installed OR python3-curses-3.4.6-25.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libmysqlclient18-10.0.35-29.20 is installed OR libmysqlclient18-32bit-10.0.35-29.20 is installed OR mariadb-10.0.35-29.20 is installed OR mariadb-client-10.0.35-29.20 is installed OR mariadb-errormessages-10.0.35-29.20 is installed OR mariadb-tools-10.0.35-29.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information ImageMagick-6.8.8.1-71.108 is installed OR ImageMagick-config-6-SUSE-6.8.8.1-71.108 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.108 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.108 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.108 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information gdk-pixbuf-loader-rsvg-2.40.15-4 is installed OR librsvg-2-2-2.40.15-4 is installed OR librsvg-2-2-32bit-2.40.15-4 is installed OR rsvg-view-2.40.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND ucode-intel-20190618-13.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND squid-3.5.21-26.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libvirglrenderer0-0.5.0-12.3 is installed OR virglrenderer-0.5.0-12.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache2-mod_apparmor-2.8.2-49 is installed OR apparmor-docs-2.8.2-49 is installed OR apparmor-parser-2.8.2-49 is installed OR apparmor-profiles-2.8.2-49 is installed OR apparmor-utils-2.8.2-49 is installed OR libapparmor1-2.8.2-49 is installed OR libapparmor1-32bit-2.8.2-49 is installed OR pam_apparmor-2.8.2-49 is installed OR pam_apparmor-32bit-2.8.2-49 is installed OR perl-apparmor-2.8.2-49 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openvpn-2.3.8-16.20 is installed OR openvpn-auth-pam-plugin-2.3.8-16.20 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-ceilometer-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-agent-central-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-api-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-collector-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-doc-7.0.4~a0~dev7-3 is installed OR openstack-ceilometer-polling-7.0.4~a0~dev7-3 is installed OR openstack-cinder-9.1.5~a0~dev1-3 is installed OR openstack-cinder-api-9.1.5~a0~dev1-3 is installed OR openstack-cinder-backup-9.1.5~a0~dev1-3 is installed OR openstack-cinder-doc-9.1.5~a0~dev1-3 is installed OR openstack-cinder-scheduler-9.1.5~a0~dev1-3 is installed OR openstack-cinder-volume-9.1.5~a0~dev1-3 is installed OR openstack-dashboard-10.0.4~a0~dev2-3 is installed OR openstack-glance-13.0.1~a0~dev6-3 is installed OR openstack-glance-api-13.0.1~a0~dev6-3 is installed OR openstack-glance-doc-13.0.1~a0~dev6-3 is installed OR openstack-glance-glare-13.0.1~a0~dev6-3 is installed OR openstack-glance-registry-13.0.1~a0~dev6-3 is installed OR openstack-heat-7.0.4~a0~dev4-4 is installed OR openstack-heat-api-7.0.4~a0~dev4-4 is installed OR openstack-heat-api-cfn-7.0.4~a0~dev4-4 is installed OR openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4 is installed OR openstack-heat-doc-7.0.4~a0~dev4-4 is installed OR openstack-heat-engine-7.0.4~a0~dev4-4 is installed OR openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4 is installed OR openstack-heat-test-7.0.4~a0~dev4-4 is installed OR openstack-keystone-10.0.2~a0~dev2-6 is installed OR openstack-keystone-doc-10.0.2~a0~dev2-6 is installed OR openstack-magnum-3.1.2~a0~dev22-13 is installed OR openstack-magnum-api-3.1.2~a0~dev22-13 is installed OR openstack-magnum-conductor-3.1.2~a0~dev22-13 is installed OR openstack-magnum-doc-3.1.2~a0~dev22-13 is installed OR openstack-manila-3.0.1~a0~dev27-3 is installed OR openstack-manila-api-3.0.1~a0~dev27-3 is installed OR openstack-manila-data-3.0.1~a0~dev27-3 is installed OR openstack-manila-doc-3.0.1~a0~dev27-3 is installed OR openstack-manila-scheduler-3.0.1~a0~dev27-3 is installed OR openstack-manila-share-3.0.1~a0~dev27-3 is installed OR openstack-nova-14.0.6~a0~dev16-3 is installed OR openstack-nova-api-14.0.6~a0~dev16-3 is installed OR openstack-nova-cells-14.0.6~a0~dev16-3 is installed OR openstack-nova-cert-14.0.6~a0~dev16-3 is installed OR openstack-nova-compute-14.0.6~a0~dev16-3 is installed OR openstack-nova-conductor-14.0.6~a0~dev16-3 is installed OR openstack-nova-console-14.0.6~a0~dev16-3 is installed OR openstack-nova-consoleauth-14.0.6~a0~dev16-3 is installed OR openstack-nova-doc-14.0.6~a0~dev16-3 is installed OR openstack-nova-novncproxy-14.0.6~a0~dev16-3 is installed OR openstack-nova-placement-api-14.0.6~a0~dev16-3 is installed OR openstack-nova-scheduler-14.0.6~a0~dev16-3 is installed OR openstack-nova-serialproxy-14.0.6~a0~dev16-3 is installed OR openstack-nova-vncproxy-14.0.6~a0~dev16-3 is installed OR python-ceilometer-7.0.4~a0~dev7-3 is installed OR python-cinder-9.1.5~a0~dev1-3 is installed OR python-glance-13.0.1~a0~dev6-3 is installed OR python-heat-7.0.4~a0~dev4-4 is installed OR python-horizon-10.0.4~a0~dev2-3 is installed OR python-keystone-10.0.2~a0~dev2-6 is installed OR python-magnum-3.1.2~a0~dev22-13 is installed OR python-manila-3.0.1~a0~dev27-3 is installed OR python-nova-14.0.6~a0~dev16-3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libssh2-1-1.4.3-20.14 is installed OR libssh2-1-32bit-1.4.3-20.14 is installed OR libssh2_org-1.4.3-20.14 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND slf4j-1.7.12-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information mariadb-10.2.29-3.22 is installed OR mariadb-galera-10.2.29-3.22 is installed
BACK