shield Security update for nghttp2

SUSE-SLE-Module-Basesystem-15-2019-2473

This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#11461). Bug fixes and enhancements: - Fixed mistake in spec file (bsc#1125689) - Fixed build issue with boost 1.70.0 (bsc#1134616) - Feature: Add W&S module (FATE#326776, bsc#1112438)

• Release Date
  Sep 26 2019
• References
  Bugzilla: 1112438, 1125689, 1134616, 1146182, 1146184
  CVEs: CVE-2019-9511, CVE-2019-9513
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15 aarch64

• Packages
  libnghttp2-14
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.39.2-3.3.1 lock src

Basesystem Module 15 x86_64

• Packages
  libnghttp2-14
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2-14-32bit
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.39.2-3.3.1 lock src

Basesystem Module 15 ppc64le

• Packages
  libnghttp2-14
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.39.2-3.3.1 lock src

Basesystem Module 15 s390x

• Packages
  libnghttp2-14
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio-devel
  Development files for nghttp2

  1.39.2-3.3.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.39.2-3.3.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.39.2-3.3.1 lock src