Oval Definition:oval:org.opensuse.security:def:65109
Revision Date:2020-12-01Version:1
Title:Security update for nghttp2 (Moderate)
Description:

This update for nghttp2 fixes the following issues:

nghttp2 was update to version 1.40.0 (bsc#1166481)

- lib: Add nghttp2_check_authority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static and dynamic lib - build: Add new flag ENABLE_STATIC_CRT for Windows - build: cmake: Support building nghttpx with systemd - third-party: Update neverbleed to fix memory leak - nghttpx: Fix bug that mruby is incorrectly shared between backends - nghttpx: Reconnect h1 backend if it lost connection before sending headers - nghttpx: Returns 408 if backend timed out before sending headers - nghttpx: Fix request stal

Family:unixClass:patch
Status:Reference(s):1133375
1159003
1166481
1178512
CVE-2019-18802
CVE-2019-9928
CVE-2020-28196
SUSE-SU-2020:0722-1
SUSE-SU-2020:1300-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • krb5-1.16.3-lp152.5.13 is installed
  • OR krb5-32bit-1.16.3-lp152.5.13 is installed
  • OR krb5-client-1.16.3-lp152.5.13 is installed
  • OR krb5-devel-1.16.3-lp152.5.13 is installed
  • OR krb5-devel-32bit-1.16.3-lp152.5.13 is installed
  • OR krb5-mini-1.16.3-lp152.5.13 is installed
  • OR krb5-mini-devel-1.16.3-lp152.5.13 is installed
  • OR krb5-plugin-kdb-ldap-1.16.3-lp152.5.13 is installed
  • OR krb5-plugin-preauth-otp-1.16.3-lp152.5.13 is installed
  • OR krb5-plugin-preauth-pkinit-1.16.3-lp152.5.13 is installed
  • OR krb5-server-1.16.3-lp152.5.13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • libnghttp2-14-1.40.0-3.6 is installed
  • OR libnghttp2-14-32bit-1.40.0-3.6 is installed
  • OR libnghttp2-devel-1.40.0-3.6 is installed
  • OR libnghttp2_asio-devel-1.40.0-3.6 is installed
  • OR libnghttp2_asio1-1.40.0-3.6 is installed
  • OR nghttp2-1.40.0-3.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • gstreamer-plugins-base-1.12.5-3.3 is installed
  • OR gstreamer-plugins-base-devel-1.12.5-3.3 is installed
  • OR typelib-1_0-GstAllocators-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstApp-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstAudio-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstFft-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstPbutils-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstRtp-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstRtsp-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstSdp-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstTag-1_0-1.12.5-3.3 is installed
  • OR typelib-1_0-GstVideo-1_0-1.12.5-3.3 is installed
  • BACK