Oval Definition:oval:org.opensuse.security:def:65780
Revision Date:2020-12-01Version:1
Title:Security update for nghttp2 (Moderate)
Description:

This update for nghttp2 fixes the following issues:

nghttp2 was update to version 1.40.0 (bsc#1166481)

- lib: Add nghttp2_check_authority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static and dynamic lib - build: Add new flag ENABLE_STATIC_CRT for Windows - build: cmake: Support building nghttpx with systemd - third-party: Update neverbleed to fix memory leak - nghttpx: Fix bug that mruby is incorrectly shared between backends - nghttpx: Reconnect h1 backend if it lost connection before sending headers - nghttpx: Returns 408 if backend timed out before sending headers - nghttpx: Fix request stal

Family:unixClass:patch
Status:Reference(s):1149841
1151021
1159003
1166481
CVE-2019-14835
CVE-2019-18802
SUSE-SU-2020:0722-1
Platform(s):SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_10-default-2-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_3-2-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • libnghttp2_asio1-32bit-1.40.0-3.6 is installed
  • OR nghttp2-1.40.0-3.6 is installed
  • OR nghttp2-python-1.40.0-3.6 is installed
  • OR python3-nghttp2-1.40.0-3.6 is installed
  • BACK