Oval Definition:oval:org.opensuse.security:def:111235
Revision Date:2021-02-25Version:1
Title:Security update for nghttp2 (Moderate)
Description:

This update for nghttp2 fixes the following issues:

nghttp2 was update to version 1.40.0 (bsc#1166481)

- lib: Add nghttp2_check_authority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static and dynamic lib - build: Add new flag ENABLE_STATIC_CRT for Windows - build: cmake: Support building nghttpx with systemd - third-party: Update neverbleed to fix memory leak - nghttpx: Fix bug that mruby is incorrectly shared between backends - nghttpx: Reconnect h1 backend if it lost connection before sending headers - nghttpx: Returns 408 if backend timed out before sending headers - nghttpx: Fix request stal



This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1159003
1166481
CVE-2019-18802
openSUSE-SU-2021:0341-1
Platform(s):openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • libnghttp2-14-1.40.0-lp152.2.3.1 is installed
  • OR libnghttp2-14-32bit-1.40.0-lp152.2.3.1 is installed
  • OR libnghttp2-devel-1.40.0-lp152.2.3.1 is installed
  • OR libnghttp2_asio-devel-1.40.0-lp152.2.3.1 is installed
  • OR libnghttp2_asio1-1.40.0-lp152.2.3.1 is installed
  • OR libnghttp2_asio1-32bit-1.40.0-lp152.2.3.1 is installed
  • OR nghttp2-1.40.0-lp152.2.3.1 is installed
  • OR python3-nghttp2-1.40.0-lp152.2.3.1 is installed
  • BACK