Oval Definition:	oval:org.opensuse.security:def:66242
Revision Date: 2020-12-01 Version: 1 Title: Security update for rubygem-puma (Moderate) Description: This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176). - Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965). Family: unix Class: patch Status: Reference(s): 1166238 1172175 1172176 CVE-2019-20503 CVE-2020-11076 CVE-2020-11077 CVE-2020-6805 CVE-2020-6806 CVE-2020-6807 CVE-2020-6811 CVE-2020-6812 CVE-2020-6814 SUSE-SU-2020:0721-1 SUSE-SU-2020:1919-1 Platform(s): SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1 Product(s): Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information ruby2.5-rubygem-puma-4.3.5-3.3 is installed OR rubygem-puma-4.3.5-3.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-68.6.0-3.74 is installed OR MozillaThunderbird-translations-common-68.6.0-3.74 is installed OR MozillaThunderbird-translations-other-68.6.0-3.74 is installed
BACK