CLSA-2022-1650377152

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2022-1650377152
Upstream
Published
2022-04-19T14:05:52Z
Modified
2026-06-04T09:45:43.533411364Z
Summary
Fix CVE(s): CVE-2020-11724
Details
  • SECURITY UPDATE: HTTP request smuggling in Lua module
    • debian/modules/nginx-lua: Fix parsing HTTP headers in the ngx.location.capture API (porting an upstream patch 9ab38e8ee35fc08a57636b1b6190dca70b0076fa from https://github.com/openresty/lua-nginx-module)
    • CVE-2020-11724
References

Affected packages

TuxCare:Ubuntu:16.04
nginx

Package

Name
nginx
Purl
pkg:deb/tuxcare/nginx?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"
nginx-common

Package

Name
nginx-common
Purl
pkg:deb/tuxcare/nginx-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"
nginx-core

Package

Name
nginx-core
Purl
pkg:deb/tuxcare/nginx-core?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"
nginx-doc

Package

Name
nginx-doc
Purl
pkg:deb/tuxcare/nginx-doc?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"
nginx-extras

Package

Name
nginx-extras
Purl
pkg:deb/tuxcare/nginx-extras?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"
nginx-full

Package

Name
nginx-full
Purl
pkg:deb/tuxcare/nginx-full?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"
nginx-light

Package

Name
nginx-light
Purl
pkg:deb/tuxcare/nginx-light?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.10.3-0ubuntu0.16.04.8+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1650377152.json"