diff --git a/nginx.changes b/nginx.changes index d15e849..35c195b 100644 --- a/nginx.changes +++ b/nginx.changes @@ -290,6 +290,8 @@ Sat Dec 28 11:03:16 UTC 2019 - Илья Индиго * A timeout might occur while handling pipelined requests in an SSL connection; the bug had appeared in 1.17.5. * Bugfix in the ngx_http_dav_module. + * CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page + configurations which could have allowed unauthorized web page reads (bsc#1160682). ------------------------------------------------------------------- Sat Nov 23 20:12:57 UTC 2019 - Marcus Rueckert