Oval Definition:oval:org.opensuse.security:def:74776
Revision Date:2020-12-01Version:1
Title:Security update for nghttp2 (Moderate)
Description:

This update for nghttp2 fixes the following issues:

nghttp2 was update to version 1.40.0 (bsc#1166481)

- lib: Add nghttp2_check_authority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static and dynamic lib - build: Add new flag ENABLE_STATIC_CRT for Windows - build: cmake: Support building nghttpx with systemd - third-party: Update neverbleed to fix memory leak - nghttpx: Fix bug that mruby is incorrectly shared between backends - nghttpx: Reconnect h1 backend if it lost connection before sending headers - nghttpx: Returns 408 if backend timed out before sending headers - nghttpx: Fix request stal



This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1159003
1160687
1165870
1166481
1167463
1171997
CVE-2019-18802
CVE-2020-12801
openSUSE-SU-2020:0379-1
openSUSE-SU-2020:0786-1
Platform(s):openSUSE Leap 15.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libnghttp2-14-1.40.0-lp151.3.6 is installed
  • OR libnghttp2-14-32bit-1.40.0-lp151.3.6 is installed
  • OR libnghttp2-devel-1.40.0-lp151.3.6 is installed
  • OR libnghttp2_asio-devel-1.40.0-lp151.3.6 is installed
  • OR libnghttp2_asio1-1.40.0-lp151.3.6 is installed
  • OR libnghttp2_asio1-32bit-1.40.0-lp151.3.6 is installed
  • OR nghttp2-1.40.0-lp151.3.6 is installed
  • OR nghttp2-python-1.40.0-lp151.3.6 is installed
  • OR python3-nghttp2-1.40.0-lp151.3.6 is installed
  • BACK