Oval Definition:	oval:org.opensuse.security:def:50896
Revision Date: 2020-12-01 Version: 1 Title: Security update for nghttp2 (Moderate) Description: This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 (bsc#1166481) - lib: Add nghttp2_check_authority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static and dynamic lib - build: Add new flag ENABLE_STATIC_CRT for Windows - build: cmake: Support building nghttpx with systemd - third-party: Update neverbleed to fix memory leak - nghttpx: Fix bug that mruby is incorrectly shared between backends - nghttpx: Reconnect h1 backend if it lost connection before sending headers - nghttpx: Returns 408 if backend timed out before sending headers - nghttpx: Fix request stal Family: unix Class: patch Status: Reference(s): 1012382 1031392 1043912 1044189 1046302 1046306 1046307 1046543 1050244 1051510 1054914 1055014 1055117 1055120 1058659 1060463 1061840 1062631 1064232 1065600 1065729 1068032 1069138 1071995 1077761 1077989 1078720 1080157 1082519 1082555 1083647 1083663 1084332 1085030 1085042 1085262 1086282 1089663 1090078 1090528 1092115 1092903 1093389 1094244 1095344 1096748 1097105 1098459 1098782 1098822 1099922 1099999 1100000 1100001 1100132 1101557 1101669 1102346 1102495 1102870 1102875 1102877 1102879 1102882 1102896 1103269 1103363 1103387 1103405 1103421 1103587 1103636 1103948 1103949 1103961 1104172 1104353 1104824 1104888 1105190 1105247 1105524 1105536 1105597 1105603 1105672 1105795 1105907 1106007 1106016 1106105 1106121 1106170 1106178 1106191 1106229 1106230 1106231 1106233 1106235 1106236 1106237 1106238 1106240 1106291 1106297 1106333 1106369 1106426 1106427 1106464 1106509 1106511 1106594 1106636 1106688 1106697 1106743 1106779 1106800 1106890 1106891 1106892 1106893 1106894 1106896 1106897 1106898 1106899 1106900 1106901 1106902 1106903 1106905 1106906 1106948 1106995 1107008 1107060 1107061 1107065 1107073 1107074 1107078 1107265 1107319 1107320 1107522 1107535 1107689 1107735 1107756 1107783 1107829 1107870 1107924 1107928 1107945 1107947 1107966 1108010 1108093 1108096 1108170 1108243 1108281 1108323 1108399 1108520 1108823 1108870 1109244 1109269 1109333 1109336 1109337 1109511 1109603 1109806 1109859 1109979 1109992 1110006 1110301 1110363 1110639 1110642 1110643 1110644 1110645 1110646 1110647 1110649 1110650 1126826 1126829 1126831 1132728 1132729 1132732 1133135 1135114 1140126 1142649 1143609 1146025 1153768 1153770 1154804 1154805 1155198 1155205 1155298 1155678 1155819 1156158 1157377 1157627 1157755 1158763 1159003 1159819 1160254 1160590 1160968 1162972 1163184 1163333 1163744 1164505 1165784 1165849 1166481 1169746 1171252 1171254 1171978 1172053 1172189 1172795 1172796 1174091 1176086 1176181 1176671 1177211 1177914 920344 CVE-2018-10938 CVE-2018-10940 CVE-2018-1128 CVE-2018-1129 CVE-2018-12896 CVE-2018-13093 CVE-2018-13094 CVE-2018-13095 CVE-2018-14613 CVE-2018-14617 CVE-2018-14633 CVE-2018-16658 CVE-2018-17182 CVE-2018-3639 CVE-2018-6554 CVE-2018-6555 CVE-2018-9154 CVE-2019-12972 CVE-2019-14250 CVE-2019-14444 CVE-2019-17006 CVE-2019-17450 CVE-2019-17451 CVE-2019-18802 CVE-2019-18900 CVE-2019-20907 CVE-2019-2602 CVE-2019-2684 CVE-2019-2698 CVE-2019-4732 CVE-2019-9074 CVE-2019-9075 CVE-2019-9077 CVE-2020-10029 CVE-2020-12399 CVE-2020-12653 CVE-2020-12654 CVE-2020-12802 CVE-2020-12803 CVE-2020-15999 CVE-2020-24659 CVE-2020-2583 CVE-2020-2593 CVE-2020-2604 CVE-2020-26116 CVE-2020-2659 SUSE-SU-2018:2980-1 SUSE-SU-2018:3159-1 SUSE-SU-2019:1211-2 SUSE-SU-2020:0432-1 SUSE-SU-2020:0466-1 SUSE-SU-2020:0668-1 SUSE-SU-2020:0722-1 SUSE-SU-2020:1677-1 SUSE-SU-2020:2276-1 SUSE-SU-2020:2995-1 SUSE-SU-2020:3115-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.22-7.11 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.22-7.11 is installed OR libgstbasecamerabinsrc-0_10-0-0.10.22-7.11 is installed OR libgstbasecamerabinsrc-0_10-0-32bit-0.10.22-7.11 is installed OR libgstbasevideo-0_10-0-0.10.22-7.11 is installed OR libgstbasevideo-0_10-0-32bit-0.10.22-7.11 is installed OR libgstphotography-0_10-0-0.10.22-7.11 is installed OR libgstphotography-0_10-0-32bit-0.10.22-7.11 is installed OR libgstsignalprocessor-0_10-0-0.10.22-7.11 is installed OR libgstsignalprocessor-0_10-0-32bit-0.10.22-7.11 is installed OR libgstvdp-0_10-0-0.10.22-7.11 is installed OR libgstvdp-0_10-0-32bit-0.10.22-7.11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed OR libMagickWand-6_Q16-1-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.23-17 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.23-17 is installed OR libgstbasecamerabinsrc-0_10-23-0.10.23-17 is installed OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-17 is installed OR libgstbasevideo-0_10-23-0.10.23-17 is installed OR libgstbasevideo-0_10-23-32bit-0.10.23-17 is installed OR libgstcodecparsers-0_10-23-0.10.23-17 is installed OR libgstphotography-0_10-23-0.10.23-17 is installed OR libgstphotography-0_10-23-32bit-0.10.23-17 is installed OR libgstsignalprocessor-0_10-23-0.10.23-17 is installed OR libgstsignalprocessor-0_10-23-32bit-0.10.23-17 is installed OR libgstvdp-0_10-23-0.10.23-17 is installed OR libgstvdp-0_10-23-32bit-0.10.23-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information empathy-3.12.12-5 is installed OR empathy-lang-3.12.12-5 is installed OR telepathy-mission-control-plugin-goa-3.12.12-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cpp48-4.8.5-30 is installed OR gcc48-4.8.5-30 is installed OR gcc48-32bit-4.8.5-30 is installed OR gcc48-c++-4.8.5-30 is installed OR gcc48-gij-4.8.5-30 is installed OR gcc48-gij-32bit-4.8.5-30 is installed OR gcc48-info-4.8.5-30 is installed OR libasan0-4.8.5-30 is installed OR libasan0-32bit-4.8.5-30 is installed OR libgcj48-4.8.5-30 is installed OR libgcj48-32bit-4.8.5-30 is installed OR libgcj48-jar-4.8.5-30 is installed OR libgcj_bc1-4.8.5-30 is installed OR libstdc++48-devel-4.8.5-30 is installed OR libstdc++48-devel-32bit-4.8.5-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND iputils-s20121221-2 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information libsolv-0.7.10-3.13 is installed OR python-solv-0.7.10-3.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libnghttp2-14-1.40.0-3.6 is installed OR libnghttp2-14-32bit-1.40.0-3.6 is installed OR libnghttp2-devel-1.40.0-3.6 is installed OR libnghttp2_asio-devel-1.40.0-3.6 is installed OR libnghttp2_asio1-1.40.0-3.6 is installed OR nghttp2-1.40.0-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libpython2_7-1_0-2.7.17-7.41 is installed OR python-2.7.17-7.41 is installed OR python-base-2.7.17-7.41 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-openjdk-1.8.0.212-3.19 is installed OR java-1_8_0-openjdk-demo-1.8.0.212-3.19 is installed OR java-1_8_0-openjdk-devel-1.8.0.212-3.19 is installed OR java-1_8_0-openjdk-headless-1.8.0.212-3.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_21-default-6-2 is installed OR kernel-livepatch-SLE15-SP1_Update_6-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information gnutls-3.6.7-6.34 is installed OR gnutls-guile-3.6.7-6.34 is installed OR libgnutls-devel-32bit-3.6.7-6.34 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information jasper-2.0.14-3.11 is installed OR libjasper4-32bit-2.0.14-3.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.17-7.44 is installed OR python-base-2.7.17-7.44 is installed OR python-curses-2.7.17-7.44 is installed OR python-devel-2.7.17-7.44 is installed OR python-gdbm-2.7.17-7.44 is installed OR python-xml-2.7.17-7.44 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libfreebl3-hmac-3.53-3.40 is installed OR libsoftokn3-hmac-3.53-3.40 is installed OR mozilla-nss-3.53-3.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libcgroup-tools-0.41.rc1-4 is installed OR libcgroup1-0.41.rc1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information openvpn-2.3.8-16.17 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND libXxf86dga1-1.1.4-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libdcerpc-atsvc0-4.2.4-28.29 is installed OR samba-4.2.4-28.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libvirt-2.0.0-27.42 is installed OR libvirt-client-2.0.0-27.42 is installed OR libvirt-daemon-2.0.0-27.42 is installed OR libvirt-daemon-config-network-2.0.0-27.42 is installed OR libvirt-daemon-config-nwfilter-2.0.0-27.42 is installed OR libvirt-daemon-driver-interface-2.0.0-27.42 is installed OR libvirt-daemon-driver-libxl-2.0.0-27.42 is installed OR libvirt-daemon-driver-lxc-2.0.0-27.42 is installed OR libvirt-daemon-driver-network-2.0.0-27.42 is installed OR libvirt-daemon-driver-nodedev-2.0.0-27.42 is installed OR libvirt-daemon-driver-nwfilter-2.0.0-27.42 is installed OR libvirt-daemon-driver-qemu-2.0.0-27.42 is installed OR libvirt-daemon-driver-secret-2.0.0-27.42 is installed OR libvirt-daemon-driver-storage-2.0.0-27.42 is installed OR libvirt-daemon-hooks-2.0.0-27.42 is installed OR libvirt-daemon-lxc-2.0.0-27.42 is installed OR libvirt-daemon-qemu-2.0.0-27.42 is installed OR libvirt-daemon-xen-2.0.0-27.42 is installed OR libvirt-doc-2.0.0-27.42 is installed OR libvirt-lock-sanlock-2.0.0-27.42 is installed OR libvirt-nss-2.0.0-27.42 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_74-92_29-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_10-11-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_175-94_79-default-6-2 is installed OR kgraft-patch-SLE12-SP3_Update_23-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ImageMagick-6.8.8.1-71.85 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND python-requests-2.11.1-6.28 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information freetype2-2.10.1-4.8 is installed OR freetype2-devel-2.10.1-4.8 is installed OR libfreetype6-2.10.1-4.8 is installed OR libfreetype6-32bit-2.10.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr6.5-3.33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.19 is installed OR kernel-default-extra-4.12.14-25.19 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-ironic-4.2.3~a0~dev14-1 is installed OR openstack-ironic-api-4.2.3~a0~dev14-1 is installed OR openstack-ironic-conductor-4.2.3~a0~dev14-1 is installed OR python-ironic-4.2.3~a0~dev14-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-nova-14.0.10~dev13-4.11 is installed OR openstack-nova-api-14.0.10~dev13-4.11 is installed OR openstack-nova-cells-14.0.10~dev13-4.11 is installed OR openstack-nova-cert-14.0.10~dev13-4.11 is installed OR openstack-nova-compute-14.0.10~dev13-4.11 is installed OR openstack-nova-conductor-14.0.10~dev13-4.11 is installed OR openstack-nova-console-14.0.10~dev13-4.11 is installed OR openstack-nova-consoleauth-14.0.10~dev13-4.11 is installed OR openstack-nova-doc-14.0.10~dev13-4.11 is installed OR openstack-nova-novncproxy-14.0.10~dev13-4.11 is installed OR openstack-nova-placement-api-14.0.10~dev13-4.11 is installed OR openstack-nova-scheduler-14.0.10~dev13-4.11 is installed OR openstack-nova-serialproxy-14.0.10~dev13-4.11 is installed OR openstack-nova-vncproxy-14.0.10~dev13-4.11 is installed OR python-nova-14.0.10~dev13-4.11 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND squid-3.5.21-26.17 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information kernel-default-4.4.180-94.113 is installed OR kernel-default-base-4.4.180-94.113 is installed OR kernel-default-devel-4.4.180-94.113 is installed OR kernel-default-kgraft-4.4.180-94.113 is installed OR kernel-devel-4.4.180-94.113 is installed OR kernel-macros-4.4.180-94.113 is installed OR kernel-source-4.4.180-94.113 is installed OR kernel-syms-4.4.180-94.113 is installed OR kgraft-patch-4_4_180-94_113-default-1-4.5 is installed OR kgraft-patch-SLE12-SP3_Update_30-1-4.5 is installed
BACK