Security update for nghttp2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2473-1 Final 1 1 2019-09-26T08:02:06Z current 2019-09-26T08:02:06Z 2019-09-26T08:02:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for nghttp2 This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#11461). Bug fixes and enhancements: - Fixed mistake in spec file (bsc#1125689) - Fixed build issue with boost 1.70.0 (bsc#1134616) - Feature: Add W&S module (FATE#326776, bsc#1112438) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/6/cephcsi/cephcsi:latest-2019-2473,Container ses/6/rook/ceph:latest-2019-2473,Container suse/sle15:15.0-2019-2473,Container suse/sle15:15.1-2019-2473,Image SLES15-Azure-BYOS-2019-2473,Image SLES15-EC2-CHOST-HVM-BYOS-2019-2473,Image SLES15-EC2-HVM-BYOS-2019-2473,Image SLES15-GCE-BYOS-2019-2473,Image SLES15-OCI-BYOS-2019-2473,Image SLES15-SAP-Azure-2019-2473,Image SLES15-SAP-Azure-BYOS-2019-2473,Image SLES15-SAP-Azure-LI-BYOS-Production-2019-2473,Image SLES15-SAP-Azure-VLI-BYOS-Production-2019-2473,Image SLES15-SAP-EC2-HVM-2019-2473,Image SLES15-SAP-EC2-HVM-BYOS-2019-2473,Image SLES15-SAP-GCE-2019-2473,Image SLES15-SAP-GCE-BYOS-2019-2473,Image SLES15-SAP-OCI-BYOS-2019-2473,Image SLES15-SP1-Azure-BYOS-2019-2473,Image SLES15-SP1-Azure-HPC-BYOS-2019-2473,Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM-2019-2473,Image SLES15-SP1-CAP-Deployment-BYOS-GCE-2019-2473,Image SLES15-SP1-CHOST-BYOS-Azure-2019-2473,Image SLES15-SP1-CHOST-BYOS-EC2-2019-2473,Image SLES15-SP1-CHOST-BYOS-GCE-2019-2473,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2019-2473,Image SLES15-SP1-EC2-HVM-BYOS-2019-2473,Image SLES15-SP1-GCE-BYOS-2019-2473,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2019-2473,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2019-2473,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2019-2473,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2019-2473,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2019-2473,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2019-2473,Image SLES15-SP1-OCI-BYOS-2019-2473,Image SLES15-SP1-SAP-Azure-2019-2473,Image SLES15-SP1-SAP-Azure-BYOS-2019-2473,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2019-2473,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2019-2473,Image SLES15-SP1-SAP-EC2-HVM-2019-2473,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2019-2473,Image SLES15-SP1-SAP-GCE-2019-2473,Image SLES15-SP1-SAP-GCE-BYOS-2019-2473,Image SLES15-SP1-SAP-OCI-BYOS-2019-2473,Image SLES15-SP1-SAPCAL-Azure-2019-2473,Image SLES15-SP1-SAPCAL-EC2-HVM-2019-2473,Image SLES15-SP1-SAPCAL-GCE-2019-2473,SUSE-2019-2473,SUSE-SLE-Module-Basesystem-15-2019-2473,SUSE-SLE-Module-Basesystem-15-SP1-2019-2473,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2473,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2473 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1/ Link for SUSE-SU-2019:2473-1 https://lists.suse.com/pipermail/sle-security-updates/2019-September/005969.html E-Mail link for SUSE-SU-2019:2473-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1112438 SUSE Bug 1112438 https://bugzilla.suse.com/1125689 SUSE Bug 1125689 https://bugzilla.suse.com/1134616 SUSE Bug 1134616 https://bugzilla.suse.com/1146182 SUSE Bug 1146182 https://bugzilla.suse.com/1146184 SUSE Bug 1146184 https://www.suse.com/security/cve/CVE-2019-9511/ SUSE CVE CVE-2019-9511 page https://www.suse.com/security/cve/CVE-2019-9513/ SUSE CVE CVE-2019-9513 page Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container suse/sle15:15.0 Container suse/sle15:15.1 Image SLES15-Azure-BYOS Image SLES15-EC2-CHOST-HVM-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-OCI-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS Image SLES15-SAP-OCI-BYOS Image SLES15-SP1-Azure-BYOS Image SLES15-SP1-Azure-HPC-BYOS Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM Image SLES15-SP1-CAP-Deployment-BYOS-GCE Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server Image SLES15-SP1-OCI-BYOS Image SLES15-SP1-SAP-Azure Image SLES15-SP1-SAP-Azure-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAP-OCI-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 libnghttp2-14-1.39.2-3.3.1 libnghttp2-14-32bit-1.39.2-3.3.1 libnghttp2-14-64bit-1.39.2-3.3.1 libnghttp2-devel-1.39.2-3.3.1 libnghttp2_asio-devel-1.39.2-3.3.1 libnghttp2_asio1-1.39.2-3.3.1 libnghttp2_asio1-32bit-1.39.2-3.3.1 libnghttp2_asio1-64bit-1.39.2-3.3.1 nghttp2-1.39.2-3.3.1 python3-nghttp2-1.39.2-3.3.1 libnghttp2-14-1.39.2-3.3.1 as a component of Container ses/6/cephcsi/cephcsi:latest libnghttp2-14-1.39.2-3.3.1 as a component of Container ses/6/rook/ceph:latest libnghttp2-14-1.39.2-3.3.1 as a component of Container suse/sle15:15.0 libnghttp2-14-1.39.2-3.3.1 as a component of Container suse/sle15:15.1 libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-Azure-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-EC2-HVM-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-GCE-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-OCI-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-Azure libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-Azure-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-EC2-HVM libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-GCE libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-GCE-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SAP-OCI-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Azure-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-GCE libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-GCE-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-OCI-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-Azure libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-EC2-HVM libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-GCE libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAP-OCI-BYOS libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAPCAL-Azure libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM libnghttp2-14-1.39.2-3.3.1 as a component of Image SLES15-SP1-SAPCAL-GCE libnghttp2-14-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnghttp2-14-32bit-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnghttp2-devel-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnghttp2_asio-devel-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnghttp2_asio1-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnghttp2-14-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libnghttp2-14-32bit-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libnghttp2-devel-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libnghttp2_asio-devel-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libnghttp2_asio1-1.39.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. CVE-2019-9511 Container ses/6/cephcsi/cephcsi:latest:libnghttp2-14-1.39.2-3.3.1 Container ses/6/rook/ceph:latest:libnghttp2-14-1.39.2-3.3.1 Container suse/sle15:15.0:libnghttp2-14-1.39.2-3.3.1 Container suse/sle15:15.1:libnghttp2-14-1.39.2-3.3.1 Image SLES15-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-EC2-CHOST-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CHOST-BYOS-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CHOST-BYOS-EC2:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CHOST-BYOS-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAPCAL-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAPCAL-GCE:libnghttp2-14-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2-14-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2-14-32bit-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2_asio-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2_asio1-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2-14-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2-14-32bit-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2_asio-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2_asio1-1.39.2-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1/ https://www.suse.com/security/cve/CVE-2019-9511.html CVE-2019-9511 https://bugzilla.suse.com/1145579 SUSE Bug 1145579 https://bugzilla.suse.com/1146091 SUSE Bug 1146091 https://bugzilla.suse.com/1146182 SUSE Bug 1146182 https://bugzilla.suse.com/1193427 SUSE Bug 1193427 https://bugzilla.suse.com/1202787 SUSE Bug 1202787 Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU. CVE-2019-9513 Container ses/6/cephcsi/cephcsi:latest:libnghttp2-14-1.39.2-3.3.1 Container ses/6/rook/ceph:latest:libnghttp2-14-1.39.2-3.3.1 Container suse/sle15:15.0:libnghttp2-14-1.39.2-3.3.1 Container suse/sle15:15.1:libnghttp2-14-1.39.2-3.3.1 Image SLES15-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-EC2-CHOST-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SAP-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CHOST-BYOS-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CHOST-BYOS-EC2:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-CHOST-BYOS-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-GCE:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAP-OCI-BYOS:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAPCAL-Azure:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAPCAL-EC2-HVM:libnghttp2-14-1.39.2-3.3.1 Image SLES15-SP1-SAPCAL-GCE:libnghttp2-14-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2-14-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2-14-32bit-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2_asio-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libnghttp2_asio1-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2-14-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2-14-32bit-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2_asio-devel-1.39.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15:libnghttp2_asio1-1.39.2-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1/ https://www.suse.com/security/cve/CVE-2019-9513.html CVE-2019-9513 https://bugzilla.suse.com/1145580 SUSE Bug 1145580 https://bugzilla.suse.com/1146094 SUSE Bug 1146094 https://bugzilla.suse.com/1146184 SUSE Bug 1146184 https://bugzilla.suse.com/1193427 SUSE Bug 1193427 https://bugzilla.suse.com/1202787 SUSE Bug 1202787