Unscored RHSA-2020:5495 1 CVE

Red Hat Security Advisory: nginx:1.16 security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 15

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-all-modules	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-debuginfo	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-debugsource	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-filesystem	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-http-image-filter	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-http-image-filter-debuginfo	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-http-perl	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-http-perl-debuginfo	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-http-xslt-filter	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-http-xslt-filter-debuginfo	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-mail	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-mail-debuginfo	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-stream	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1
Red Hat · RHEL 8 enterprise_linux:8::appstream	nginx-mod-stream-debuginfo	1:1.16.1-1.module+el8.3.0+8844+e5e7039f.1

Vulnerabilities 1

Unscored —

CVE-2019-20372 Public exploit EPSS 15%

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the abil…

nginx nginx nginx Debian Ubuntu Alpine

Jan 9, 2020

References

article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790277
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5495.json
report
https://access.redhat.com/security/cve/CVE-2019-20372
advisory
https://www.cve.org/CVERecord?id=CVE-2019-20372
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-20372