Security update for nghttp2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0932-1 Final 1 1 2021-03-24T11:13:09Z current 2021-03-24T11:13:09Z 2021-03-24T11:13:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for nghttp2 This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358). - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#1146182). - CVE-2018-1000168: Fixed ALTSVC frame client side denial of service (bsc#1088639). - CVE-2016-1544: Fixed out of memory due to unlimited incoming HTTP header fields (bsc#966514). Bug fixes and enhancements: - Packages must not mark license files as %doc (bsc#1082318) - Typo in description of libnghttp2_asio1 (bsc#962914) - Fixed mistake in spec file (bsc#1125689) - Fixed build issue with boost 1.70.0 (bsc#1134616) - Fixed build issue with GCC 6 (bsc#964140) - Feature: Add W&S module (FATE#326776, bsc#1112438) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles12sp4:latest-2021-932,Container suse/sles12sp5:latest-2021-932,HPE-Helion-OpenStack-8-2021-932,Image SLES12-SP4-Azure-BYOS-2021-932,Image SLES12-SP4-EC2-HVM-BYOS-2021-932,Image SLES12-SP4-GCE-BYOS-2021-932,Image SLES12-SP4-SAP-Azure-2021-932,Image SLES12-SP4-SAP-Azure-BYOS-2021-932,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2021-932,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2021-932,Image SLES12-SP4-SAP-EC2-HVM-2021-932,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2021-932,Image SLES12-SP4-SAP-GCE-2021-932,Image SLES12-SP4-SAP-GCE-BYOS-2021-932,Image SLES12-SP5-Azure-BYOS-2021-932,Image SLES12-SP5-Azure-Basic-On-Demand-2021-932,Image SLES12-SP5-Azure-HPC-BYOS-2021-932,Image SLES12-SP5-Azure-HPC-On-Demand-2021-932,Image SLES12-SP5-Azure-SAP-BYOS-2021-932,Image SLES12-SP5-Azure-SAP-On-Demand-2021-932,Image SLES12-SP5-Azure-Standard-On-Demand-2021-932,Image SLES12-SP5-EC2-BYOS-2021-932,Image SLES12-SP5-EC2-ECS-On-Demand-2021-932,Image SLES12-SP5-EC2-On-Demand-2021-932,Image SLES12-SP5-EC2-SAP-BYOS-2021-932,Image SLES12-SP5-EC2-SAP-On-Demand-2021-932,Image SLES12-SP5-GCE-BYOS-2021-932,Image SLES12-SP5-GCE-On-Demand-2021-932,Image SLES12-SP5-GCE-SAP-BYOS-2021-932,Image SLES12-SP5-GCE-SAP-On-Demand-2021-932,Image SLES12-SP5-OCI-BYOS-BYOS-2021-932,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2021-932,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2021-932,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2021-932,SUSE-2021-932,SUSE-OpenStack-Cloud-7-2021-932,SUSE-OpenStack-Cloud-8-2021-932,SUSE-OpenStack-Cloud-9-2021-932,SUSE-OpenStack-Cloud-Crowbar-8-2021-932,SUSE-OpenStack-Cloud-Crowbar-9-2021-932,SUSE-SLE-SAP-12-SP2-2021-932,SUSE-SLE-SAP-12-SP3-2021-932,SUSE-SLE-SAP-12-SP4-2021-932,SUSE-SLE-SERVER-12-SP2-2021-932,SUSE-SLE-SERVER-12-SP2-BCL-2021-932,SUSE-SLE-SERVER-12-SP3-2021-932,SUSE-SLE-SERVER-12-SP3-BCL-2021-932,SUSE-SLE-SERVER-12-SP4-LTSS-2021-932,SUSE-SLE-SERVER-12-SP5-2021-932 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/ Link for SUSE-SU-2021:0932-1 https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html E-Mail link for SUSE-SU-2021:0932-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1082318 SUSE Bug 1082318 https://bugzilla.suse.com/1088639 SUSE Bug 1088639 https://bugzilla.suse.com/1112438 SUSE Bug 1112438 https://bugzilla.suse.com/1125689 SUSE Bug 1125689 https://bugzilla.suse.com/1134616 SUSE Bug 1134616 https://bugzilla.suse.com/1146182 SUSE Bug 1146182 https://bugzilla.suse.com/1146184 SUSE Bug 1146184 https://bugzilla.suse.com/1181358 SUSE Bug 1181358 https://bugzilla.suse.com/962914 SUSE Bug 962914 https://bugzilla.suse.com/964140 SUSE Bug 964140 https://bugzilla.suse.com/966514 SUSE Bug 966514 https://www.suse.com/security/cve/CVE-2016-1544/ SUSE CVE CVE-2016-1544 page https://www.suse.com/security/cve/CVE-2018-1000168/ SUSE CVE CVE-2018-1000168 page https://www.suse.com/security/cve/CVE-2019-9511/ SUSE CVE CVE-2019-9511 page https://www.suse.com/security/cve/CVE-2019-9513/ SUSE CVE CVE-2019-9513 page https://www.suse.com/security/cve/CVE-2020-11080/ SUSE CVE CVE-2020-11080 page Container suse/sles12sp4:latest Container suse/sles12sp5:latest HPE Helion OpenStack 8 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 libnghttp2-14-1.39.2-3.5.1 libnghttp2-14-32bit-1.39.2-3.5.1 libnghttp2-14-64bit-1.39.2-3.5.1 libnghttp2-devel-1.39.2-3.5.1 libnghttp2_asio-devel-1.39.2-3.5.1 libnghttp2_asio1-1.39.2-3.5.1 libnghttp2_asio1-32bit-1.39.2-3.5.1 libnghttp2_asio1-64bit-1.39.2-3.5.1 nghttp2-1.39.2-3.5.1 python3-nghttp2-1.39.2-3.5.1 libnghttp2-14-1.39.2-3.5.1 as a component of Container suse/sles12sp4:latest libnghttp2-14-1.39.2-3.5.1 as a component of Container suse/sles12sp5:latest libnghttp2-14-1.39.2-3.5.1 as a component of HPE Helion OpenStack 8 libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-Azure-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-GCE-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-Azure libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-GCE libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-EC2-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-EC2-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-GCE-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-GCE-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libnghttp2-14-1.39.2-3.5.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libnghttp2-14-32bit-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP5 libnghttp2-14-32bit-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP5 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libnghttp2-14-32bit-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libnghttp2-14-32bit-1.39.2-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud 7 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud 8 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud 9 libnghttp2-14-32bit-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud 9 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud Crowbar 8 libnghttp2-14-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud Crowbar 9 libnghttp2-14-32bit-1.39.2-3.5.1 as a component of SUSE OpenStack Cloud Crowbar 9 nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion). CVE-2016-1544 Container suse/sles12sp4:latest:libnghttp2-14-1.39.2-3.5.1 Container suse/sles12sp5:latest:libnghttp2-14-1.39.2-3.5.1 HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Basic-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Standard-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-ECS-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/ https://www.suse.com/security/cve/CVE-2016-1544.html CVE-2016-1544 https://bugzilla.suse.com/966514 SUSE Bug 966514 nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1. CVE-2018-1000168 Container suse/sles12sp4:latest:libnghttp2-14-1.39.2-3.5.1 Container suse/sles12sp5:latest:libnghttp2-14-1.39.2-3.5.1 HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Basic-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Standard-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-ECS-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/ https://www.suse.com/security/cve/CVE-2018-1000168.html CVE-2018-1000168 https://bugzilla.suse.com/1088639 SUSE Bug 1088639 https://bugzilla.suse.com/1097401 SUSE Bug 1097401 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. CVE-2019-9511 Container suse/sles12sp4:latest:libnghttp2-14-1.39.2-3.5.1 Container suse/sles12sp5:latest:libnghttp2-14-1.39.2-3.5.1 HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Basic-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Standard-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-ECS-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/ https://www.suse.com/security/cve/CVE-2019-9511.html CVE-2019-9511 https://bugzilla.suse.com/1145579 SUSE Bug 1145579 https://bugzilla.suse.com/1146091 SUSE Bug 1146091 https://bugzilla.suse.com/1146182 SUSE Bug 1146182 https://bugzilla.suse.com/1193427 SUSE Bug 1193427 https://bugzilla.suse.com/1202787 SUSE Bug 1202787 Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU. CVE-2019-9513 Container suse/sles12sp4:latest:libnghttp2-14-1.39.2-3.5.1 Container suse/sles12sp5:latest:libnghttp2-14-1.39.2-3.5.1 HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Basic-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Standard-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-ECS-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/ https://www.suse.com/security/cve/CVE-2019-9513.html CVE-2019-9513 https://bugzilla.suse.com/1145580 SUSE Bug 1145580 https://bugzilla.suse.com/1146094 SUSE Bug 1146094 https://bugzilla.suse.com/1146184 SUSE Bug 1146184 https://bugzilla.suse.com/1193427 SUSE Bug 1193427 https://bugzilla.suse.com/1202787 SUSE Bug 1202787 In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., > 32), then drop the connection. CVE-2020-11080 Container suse/sles12sp4:latest:libnghttp2-14-1.39.2-3.5.1 Container suse/sles12sp5:latest:libnghttp2-14-1.39.2-3.5.1 HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-Azure:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-EC2-HVM:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP4-SAP-GCE:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Basic-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-HPC-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-Azure-Standard-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-ECS-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-EC2-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-GCE-SAP-On-Demand:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1 SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/ https://www.suse.com/security/cve/CVE-2020-11080.html CVE-2020-11080 https://bugzilla.suse.com/1172441 SUSE Bug 1172441 https://bugzilla.suse.com/1172442 SUSE Bug 1172442 https://bugzilla.suse.com/1181358 SUSE Bug 1181358