Description
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | h2o | 2.2.5+dfsg2-3 | — |
| Debian 12 | trafficserver | 8.0.5+ds-1 | — |
| Debian 10 | golang-1.11 | 1.11.6-1+deb10u1 | DSA-4503-1 |
| Debian 10 | h2o | 2.2.5+dfsg2-2+deb10u1 | DSA-4508-1 |
| Debian 10 | trafficserver | 8.0.2+ds-1+deb10u1 | DSA-4520-1 |
| Debian 9 | golang-golang-x-net-dev | 1:0.0+git20161013.8b4af36+dfsg-3+deb9u1 | DLA-2485-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | twisted | 18.9.0-6ubuntu1 | — |
| Ubuntu 18.04 LTS | golang-1.8 +3 | No fix yet | — |
| Ubuntu 18.04 LTS | twisted | 17.9.0-2ubuntu0.1 | USN-4308-1 |
| Ubuntu 16.04 LTS | golang-1.6 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | twisted | 16.0.0-1ubuntu0.4 | USN-4308-1 |
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | h2o | No fix yet | — |
| Ubuntu Pro 18.04 LTS | netty | 1:4.1.7-4ubuntu0.1+esm1 | USN-4866-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | buildah | 1.5-6.gite94b4f9.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | buildah-tests | 1.9.0-5.module+el8.1.0+4240+893c1ab8 | RHSA-2019:4269 |
| RHEL 8 | cockpit-podman | 4-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | container-selinux | 2:2.94-1.git1e99f1d.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | fuse-overlayfs | 0.3-5.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | go-toolset | 1.11.13-1.module+el8.0.1+4087+d8180914 | RHSA-2019:2726 |
| RHEL 8 | golang +6 | 1.11.13-2.module+el8.0.1+4087+d8180914 | RHSA-2019:2726 |
| RHEL 8 | nodejs +2 | 1:10.16.3-2.module+el8.0.0+4214+49953fda | RHSA-2019:2925 |
| RHEL 8 | nodejs-nodemon | 1.18.3-1.module+el8+2632+6c5111ed | RHSA-2019:2925 |
| RHEL 8 | nodejs-packaging | 17-3.module+el8+2873+aa7dfd9a | RHSA-2019:2925 |
| RHEL 8 | npm | 1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda | RHSA-2019:2925 |
| RHEL 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | podman +1 | 1.0.0-4.git921f98f.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | podman-tests +2 | 1.4.2-6.module+el8.1.0+4830+f49150d7 | RHSA-2019:4269 |
| RHEL 8 | python-podman-api | 1.2.0-0.1.gitd0a45fe.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | skopeo +1 | 1:0.1.32-6.git1715c90.module+el8.1.0+4903+9bde5d6c | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | skopeo-tests | 1:0.1.37-6.module+el8.1.0+4876+e678a192 | RHSA-2019:4269 |
| RHEL 8 | slirp4netns | 0.1-3.dev.gitc4e1bc5.module+el8.1.0+4308+9d868e48 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | toolbox | 0.0.4-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 3 | rh-nodejs10 +2 | 3.2-3.el7 | RHSA-2019:2939 |
| RHEL 3 | rh-nodejs10-nodejs +2 | 10.16.3-3.el7 | RHSA-2019:2939 |
| RHEL 3 | rh-nodejs10-npm | 6.9.0-10.16.3.3.el7 | RHSA-2019:2939 |
| RHEL 3 | rh-nodejs8 +2 | 3.0-5.el7 | RHSA-2019:2955 |
| RHEL 3 | rh-nodejs8-nodejs +2 | 8.16.1-2.el7 | RHSA-2019:2955 |
| RHEL 3 | rh-nodejs8-npm | 6.4.1-8.16.1.2.el7 | RHSA-2019:2955 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | containernetworking-plugins | 0.8.1-4.el7_7 | RHSA-2020:0406 |
| Red Hat Single Sign On 7 | rh-sso7-keycloak +1 | 4.8.15-1.Final_redhat_00001.1.el6sso | RHSA-2019:4042, RHSA-2019:4041, RHSA-2019:4040 |
| Red Hat OpenStack 14 | skydive +4 | 0.20.5-2.el7ost | RHSA-2019:2796 |
| Red Hat OpenShift 4 | ansible-operator +2 | 0.0.1-3.git.59.4beb3d2.el7 | RHSA-2019:3265 |
| Red Hat OpenShift 4 | ansible-service-broker +3 | 1:1.4.4-2.el7 | RHBA-2019:2819 |
| Red Hat OpenShift 4 | apb +2 | 2.0.3-2.el7 | RHSA-2019:3265, RHSA-2019:3245 |
| Red Hat OpenShift 4 | atomic-enterprise-service-catalog +1 | 1:4.1.14-201908290858.git.1.28cc9ff.el7 | RHSA-2019:2661 |
| Red Hat OpenShift 4 | containernetworking-plugins | 0.8.1-4.el7 | RHSA-2019:3265, RHSA-2019:3245 |
| Red Hat OpenShift 4 | cri-o | 1.13.11-0.10.dev.rhaos4.1.gitbdeb2ca.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | cri-tools | 1.13.0-2.rhaos4.1.gitc06001f.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | faq | 0.0.6-4.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | golang-github-openshift-prometheus-alert-buffer | 0-3.gitceca8c1.el7 | RHSA-2019:3265 |
| Red Hat OpenShift 4 | ignition +1 | 0.32.0-2.git5941fc0.el8 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | openshift +3 | 4.1.14-201908290858.git.0.3bd3467.el7 | RHSA-2019:2661 |
| Red Hat OpenShift 4 | openshift-eventrouter | 0.2-3.gited73fb6.el7 | RHSA-2019:3265 |
| Red Hat OpenShift 4 | openshift-external-storage +6 | 0.0.2-7.gitd3c94f0.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | pivot | 0.0.5-2.el8 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | prometheus-promu +1 | 0-5.git85ceabc.el7 | RHSA-2019:3265, RHSA-2019:3245 |
| Red Hat OpenShift 3 | ansible-service-broker +2 | 1.1.20-2.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | apb +2 | 1.9.8-1.el7 | RHBA-2019:3139 |
| Red Hat OpenShift 3 | atomic-enterprise-service-catalog +1 | 1:3.11.154-1.git.1.fa68ced.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift +13 | 3.9.101-1.git.0.150f595.el7 | RHSA-2019:2769, RHSA-2019:2690, RHBA-2019:3139 |
| Red Hat OpenShift 3 | atomic-openshift-cluster-autoscaler | 3.11.154-1.git.1.532da7a.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift-descheduler | 3.9.13-2.git.267.bb59a3f.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | atomic-openshift-dockerregistry | 3.9.101-1.git.1.13625cf.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | atomic-openshift-hyperkube +1 | 3.10.170-1.git.0.8e592d6.el7 | RHSA-2019:2690, RHBA-2019:3139 |
| Red Hat OpenShift 3 | atomic-openshift-metrics-server | 3.11.154-1.git.1.6a6b6ce.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift-node-problem-detector | 3.9.13-2.git.167.5d6b0d4.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | atomic-openshift-service-idler | 3.11.154-1.git.1.f80fb86.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift-web-console | 3.9.101-1.git.1.601c6d2.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | cockpit +1 | 195-2.rhaos.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | containernetworking-plugins | 0.5.2-6.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | cri-o | 1.9.16-3.git858756d.el7 | RHSA-2019:2817, RHSA-2019:2769 |
| Red Hat OpenShift 3 | cri-tools | 1.0.0-6.rhaos3.9.git8e6013a.el7 | RHSA-2019:2769, RHBA-2019:3139 |
| Red Hat OpenShift 3 | csi-attacher | 0.2.0-4.git27299be.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | csi-driver-registrar | 0.2.0-2.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | csi-livenessprobe | 0.0.1-2.gitff5b6a0.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | csi-provisioner | 0.2.0-3.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | golang-github-openshift-oauth-proxy | 2.1-3.git885c9f40.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | golang-github-openshift-prometheus-alert-buffer | 0-3.gitceca8c1.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | hawkular-openshift-agent | 1.2.2-3.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | heapster | 1.3.0-4.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | image-inspector | 2.1.3-2.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-enterprise-autoheal | 3.11.154-1.git.1.13199be.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | openshift-enterprise-cluster-capacity | 3.11.154-1.git.1.5798c2c.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | openshift-enterprise-image-registry | 3.8.0-2.git.216.b6b90bb.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-eventrouter | 0.1-3.git5bd9251.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-external-storage +4 | 0.0.1-9.git78d6339.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-external-storage-cephfs-provisioner +1 | 0.0.2-9.gitd3c94f0.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | openshift-monitor-project-lifecycle | 3.11.51-2.git.59.7b59e29.el7 | RHBA-2019:3139 |
| Red Hat OpenShift 3 | openvswitch-ovn-kubernetes | 0.1.0-3.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus +1 | 2.2.1-2.gitbc6058c.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus-alertmanager +1 | 0.14.0-2.git30af4d0.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus-node-exporter +1 | 3.9.101-1.git.1.8295224.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus-promu +1 | 0-5.git85ceabc.el7 | RHSA-2019:2769 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-apache-commons-beanutils | 1.9.4-1.redhat_00002.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-infinispan +5 | 8.2.11-1.SP2_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jackson-databind | 2.8.11.5-1.redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-log4j-jboss-logmanager | 1.2.2-1.Final_redhat_00002.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-netty +1 | 4.1.45-1.Final_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-undertow | 1.4.18-12.SP12_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly +1 | 7.1.7-2.GA_redhat_00002.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly-elytron | 1.1.13-1.Final_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.2.10-1.redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-byte-buddy | 1.9.11-1.redhat_00002.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-glassfish-jsf | 2.3.5-5.SP3_redhat_00003.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.0.17-2.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.13-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.4.18-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-genericjms | 2.0.2-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-msc | 1.4.11-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.16-2.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +23 | 1.3.1-6.Final_redhat_00006.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-xnio-base | 3.7.6-2.SP1_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-picketbox +1 | 5.0.3-6.Final_redhat_00005.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-picketlink-api +9 | 2.5.5-20.SP12_redhat_00009.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-resteasy +19 | 3.6.1-7.SP7_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.0.26-2.SP3_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly +2 | 7.2.5-4.GA_redhat_00002.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron | 1.6.5-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron-tool | 1.4.4-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-http-client +4 | 1.0.17-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk8 +1 | 7.2.5-4.GA_redhat_00002.1.el7eap | RHSA-2019:4019 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl +1 | 1.0.8-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl-linux-x86_64 | 1.0.8-5.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-yasson | 1.0.5-1.redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat Devtools 2019 | go-toolset-1.11 +3 | 1.11.13-1.el7 | RHSA-2019:2682 |
| Red Hat Devtools 2019 | go-toolset-1.11-golang +6 | 1.11.13-2.el7 | RHSA-2019:2682 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module_el8.3.0+2044+12421f43 | ALSA-2019:4273 |
| AlmaLinux 8 | fuse-overlayfs | 0.3-5.module_el8.3.0+2044+12421f43 | ALSA-2019:4273 |
| AlmaLinux 8 | nodejs-nodemon | 1.18.3-1.module_el8.3.0+2023+d2377ea3 | ALSA-2019:2925 |
| AlmaLinux 8 | nodejs-packaging | 17-3.module_el8.3.0+2023+d2377ea3 | ALSA-2019:2925 |
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43 | ALSA-2019:4273, ALSA-2019:4269 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43 | ALSA-2019:4273, ALSA-2019:4269 |
| AlmaLinux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module_el8.3.0+2044+12421f43 | ALSA-2019:4273 |
| AlmaLinux 8 | skopeo +1 | 1:0.1.32-6.git1715c90.module_el8.4.0+2478+12421f43 | ALSA-2019:4273 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
| Rocky Linux 8 | fuse-overlayfs | 0.3-5.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
| Rocky Linux 8 | nodejs-nodemon | 1.18.3-1.module+el8.3.0+101+f84c7154 | RLSA-2019:2925 |
| Rocky Linux 8 | nodejs-packaging | 17-3.module+el8.3.0+101+f84c7154 | RLSA-2019:2925 |
| Rocky Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273, RLSA-2019:4269 |
| Rocky Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273, RLSA-2019:4269 |
| Rocky Linux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
| Rocky Linux 8 | skopeo | 1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | nodejs10 | 10.16.3-1.12.1 | SUSE-SU-2019:2259-1 |
| SLES 15 SP1 | nodejs8 | 8.16.1-3.20.1 | SUSE-SU-2019:2260-1 |
| SLES 15 | nodejs10 | 10.16.3-1.12.1 | SUSE-SU-2019:2259-1 |
| SLES 15 | nodejs8 | 8.16.1-3.20.1 | SUSE-SU-2019:2260-1 |
| SLES 12 | nodejs10 | 10.16.3-1.12.1 | SUSE-SU-2019:2254-1 |
| SLES 12 | nodejs12 | 12.13.0-1.3.1 | SUSE-SU-2020:0059-1 |
| SLES 11 SP4 | MozillaFirefox | 68.2.0-78.51.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | MozillaFirefox-branding-SLED | 68-21.9.8 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-atk | 2.26.1-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-cairo | 1.15.10-2.13.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gdk-pixbuf | 2.36.11-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-glib2 | 2.54.3-2.14.7 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gtk3 | 3.10.9-2.15.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-harfbuzz | 1.7.5-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi | 3.2.1.git259-2.3.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-pango | 1.40.14-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nspr | 4.21-29.6.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nss | 3.45-38.9.3 | SUSE-SU-2019:14246-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.11 | 1.11.13-10.5 | openSUSE-SU-2024:10804-1 |
| openSUSE Tumbleweed | go1.12 | 1.12.17-4.8 | openSUSE-SU-2024:10805-1 |
| openSUSE Tumbleweed | notary | 0.7.0-1.2 | openSUSE-SU-2024:11098-1 |
| openSUSE Tumbleweed | python-Twisted | 21.7.0-3.2 | openSUSE-SU-2024:11212-1 |
| openSUSE Leap 15.1 | go1.11 | 1.11.13-lp151.2.9.1 | openSUSE-SU-2019:2072-1 |
| openSUSE Leap 15.1 | go1.12 | 1.12.9-lp151.2.9.1 | openSUSE-SU-2019:2130-1, openSUSE-SU-2019:2085-1, openSUSE-SU-2019:2056-1 |
| openSUSE Leap 15.1 | nodejs10 | 10.16.3-lp151.2.6.1 | openSUSE-SU-2019:2114-1 |
| openSUSE Leap 15.1 | nodejs8 | 8.16.1-lp151.2.6.1 | openSUSE-SU-2019:2115-1 |
| openSUSE Leap 15.0 | go1.11 | 1.11.13-lp151.2.9.1 | openSUSE-SU-2019:2072-1 |
| openSUSE Leap 15.0 | go1.12 | 1.12.9-lp151.2.13.1 | openSUSE-SU-2019:2056-1 |
| openSUSE Leap 15.0 | nodejs10 | 10.16.3-lp151.2.6.1 | openSUSE-SU-2019:2114-1 |
| openSUSE Leap 15.0 | nodejs8 | 8.16.1-lp151.2.6.1 | openSUSE-SU-2019:2115-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | containerd | 1.2.9-r0 | — |
| Alpine v3.24 | go | 1.12.8-r0 | — |
| Alpine v3.24 | k3s | 0.8.1-r0 | — |
| Alpine v3.24 | nodejs | 10.16.3-r0 | — |
| Alpine v3.24 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.23 | containerd | 1.2.9-r0 | — |
| Alpine v3.23 | go | 1.12.8-r0 | — |
| Alpine v3.23 | k3s | 0.8.1-r0 | — |
| Alpine v3.23 | nodejs | 10.16.3-r0 | — |
| Alpine v3.23 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.22 | containerd | 1.2.9-r0 | — |
| Alpine v3.22 | go | 1.12.8-r0 | — |
| Alpine v3.22 | k3s | 0.8.1-r0 | — |
| Alpine v3.22 | nodejs | 10.16.3-r0 | — |
| Alpine v3.22 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.21 | containerd | 1.2.9-r0 | — |
| Alpine v3.21 | go | 1.12.8-r0 | — |
| Alpine v3.21 | k3s | 0.8.1-r0 | — |
| Alpine v3.21 | nodejs | 10.16.3-r0 | — |
| Alpine v3.21 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.20 | containerd | 1.2.9-r0 | — |
| Alpine v3.20 | go | 1.12.8-r0 | — |
| Alpine v3.20 | k3s | 0.8.1-r0 | — |
| Alpine v3.20 | nodejs | 10.16.3-r0 | — |
| Alpine v3.20 | py3-twisted | 19.10.0-r0 | — |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | containerd | 1.2.9-r0 | — |
| Alpine v3.19 | go | 1.12.8-r0 | — |
| Alpine v3.19 | h2o | 2.2.6-r0 | — |
| Alpine v3.19 | k3s | 0.8.1-r0 | — |
| Alpine v3.19 | nodejs | 10.16.3-r0 | — |
| Alpine v3.19 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.18 | containerd | 1.2.9-r0 | — |
| Alpine v3.18 | go | 1.12.8-r0 | — |
| Alpine v3.18 | h2o | 2.2.6-r0 | — |
| Alpine v3.18 | k3s | 0.8.1-r0 | — |
| Alpine v3.18 | nodejs | 10.16.3-r0 | — |
| Alpine v3.18 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.17 | containerd | 1.2.9-r0 | — |
| Alpine v3.17 | go | 1.12.8-r0 | — |
| Alpine v3.17 | h2o | 2.2.6-r0 | — |
| Alpine v3.17 | k3s | 0.8.1-r0 | — |
| Alpine v3.17 | nodejs | 10.16.3-r0 | — |
| Alpine v3.17 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.16 | containerd | 1.2.9-r0 | — |
| Alpine v3.16 | go | 1.12.8-r0 | — |
| Alpine v3.16 | h2o | 2.2.6-r0 | — |
| Alpine v3.16 | k3s | 0.8.1-r0 | — |
| Alpine v3.16 | nodejs | 10.16.3-r0 | — |
| Alpine v3.16 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.15 | containerd | 1.2.9-r0 | — |
| Alpine v3.15 | go | 1.12.8-r0 | — |
| Alpine v3.15 | h2o | 2.2.6-r0 | — |
| Alpine v3.15 | k3s | 0.8.1-r0 | — |
| Alpine v3.15 | nodejs | 10.16.3-r0 | — |
| Alpine v3.15 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.14 | containerd | 1.2.9-r0 | — |
| Alpine v3.14 | go | 1.12.8-r0 | — |
| Alpine v3.14 | h2o | 2.2.6-r0 | — |
| Alpine v3.14 | k3s | 0.8.1-r0 | — |
| Alpine v3.14 | nodejs | 10.16.3-r0 | — |
| Alpine v3.14 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.13 | containerd | 1.2.9-r0 | — |
| Alpine v3.13 | go | 1.12.8-r0 | — |
| Alpine v3.13 | h2o | 2.2.6-r0 | — |
| Alpine v3.13 | k3s | 0.8.1-r0 | — |
| Alpine v3.13 | nodejs | 10.16.3-r0 | — |
| Alpine v3.13 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.12 | containerd | 1.2.9-r0 | — |
| Alpine v3.12 | go | 1.12.8-r0 | — |
| Alpine v3.12 | h2o | 2.2.6-r0 | — |
| Alpine v3.12 | nodejs | 10.16.3-r0 | — |
| Alpine v3.12 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.11 | containerd | 1.2.9-r0 | — |
| Alpine v3.11 | go | 1.12.8-r0 | — |
| Alpine v3.11 | h2o | 2.2.6-r0 | — |
| Alpine v3.11 | nodejs | 10.16.3-r0 | — |
| Alpine v3.11 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.10 | containerd | 1.2.9-r0 | — |
| Alpine v3.10 | go | 1.12.8-r0 | — |
| Alpine v3.10 | nodejs | 10.16.3-r0 | — |
| Alpine v3.9 | nodejs | 10.16.3-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | golang +5 | 1.9.4-3.amzn2.0.2 | ALAS2-2019-1272 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-tensorboard | 2.16.2-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | buildah | 1.5-6.0.1.gite94b4f9.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | buildah-tests | 1.9.0-5.0.1.module+el8.1.0+5440+994fc847 | ELSA-2019-4269 |
| Oracle Linux 8 | cockpit-podman | 4-1.module+el8.1.0+5440+994fc847 | ELSA-2019-4269 |
| Oracle Linux 8 | container-selinux | 2:2.94-1.git1e99f1d.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | fuse-overlayfs | 0.3-5.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | go-toolset | 1.11.13-1.module+el8.0.1+5334+cadcb96c | ELSA-2019-2726 |
| Oracle Linux 8 | golang +6 | 1.11.13-2.module+el8.0.1+5334+cadcb96c | ELSA-2019-2726 |
| Oracle Linux 8 | nodejs +2 | 1:10.14.1-1.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | nodejs-nodemon | 1.18.3-1.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | nodejs-packaging | 17-3.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | npm | 1:6.4.1-1.10.14.1.1.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | podman +1 | 1.0.0-4.git921f98f.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | podman-tests +2 | 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | ELSA-2019-4269 |
| Oracle Linux 8 | python-podman-api | 1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847 | ELSA-2019-4269 |
| Oracle Linux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | skopeo +1 | 1:0.1.32-6.0.1.git1715c90.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | skopeo-tests | 1:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 | ELSA-2019-4269 |
| Oracle Linux 8 | slirp4netns | 0.1-3.dev.gitc4e1bc5.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 7 | kubeadm +2 | 1.12.10-1.0.10.el7 | ELSA-2019-4816 |
| Oracle Linux 7 | kubeadm-ha-setup | 0.0.2-1.0.68.el7 | ELSA-2019-4816 |
| Oracle Linux 7 | kubeadm-upgrade | 0.0.1-1.0.27.el7 | ELSA-2019-4816 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | golang.org/x/net | < 0.0.0-20190813141303-74dc4d7220e7 | 0.0.0-20190813141303-74dc4d7220e7 | GHSA-39qc-96h7-956f |
| Go | stdlib | < 1.11.13 · >= 1.12.0-0, < 1.12.8 | 1.11.13, 1.12.8 | GO-2022-0536 |
Advisories 50
- ALSA-2019:2925 Important: nodejs:10 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2019:4269 Important: container-tools:rhel8 security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2019:4273 Important: container-tools:1.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:5856 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:0406 Red Hat Security Advisory: containernetworking-plugins security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4273 Red Hat Security Advisory: container-tools:1.0 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4269 Red Hat Security Advisory: container-tools:rhel8 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4041 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4042 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4040 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 6 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4020 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4018 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4019 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3906 Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3265 Red Hat Security Advisory: OpenShift Container Platform 4.1 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3131 Red Hat Security Advisory: OpenShift Container Platform 4.1.20 golang security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3245 Red Hat Security Advisory: OpenShift Container Platform 4.2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2955 Red Hat Security Advisory: rh-nodejs8-nodejs security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2939 Red Hat Security Advisory: rh-nodejs10-nodejs security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2925 Red Hat Security Advisory: nodejs:10 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2817 Red Hat Security Advisory: OpenShift Container Platform 3.11 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2796 Red Hat Security Advisory: skydive security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2769 Red Hat Security Advisory: OpenShift Container Platform 3.9 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2726 Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2682 Red Hat Security Advisory: go-toolset-1.11 and go-toolset-1.11-golang security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2690 Red Hat Security Advisory: OpenShift Container Platform 3.10 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHBA-2019:3139 Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2661 Red Hat Security Advisory: Red Hat OpenShift Container Platform 4.1 openshift RPM security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHBA-2019:2819 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.1.17 packages update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- USN-4866-1 netty vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-4308-1 twisted vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-4508-1 h2o - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4520-1 trafficserver - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4503-1 golang-1.11 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2485-1 golang-golang-x-net-dev - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2026-0426 Apache Traffic Server: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 16, 2026
- ELSA-2019-2726 Important: go-toolset:ol8 security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 16, 2026
- RLSA-2019:2925 Important: nodejs:10 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2019:4273 Important: container-tools:1.0 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2019:4269 Important: container-tools:rhel8 security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2019:2000-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2259-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2085-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11212-1 python-Twisted-doc-21.7.0-3.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2056-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2260-1 Security update for nodejs8 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0059-1 Security update for nodejs12 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10804-1 go1.11-1.11.13-10.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2130-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2114-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
References
- VU#605641 third-party-advisory
- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
- [trafficserver-dev] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks mailing-list
- [trafficserver-users] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks mailing-list
- [trafficserver-announce] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks mailing-list
- 20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0 mailing-list
- 20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0 mailing-list
- https://www.synology.com/security/advisory/Synology_SA_19_33
- 20190819 [SECURITY] [DSA 4503-1] golang-1.11 security update mailing-list
- DSA-4503 vendor-advisory
- https://support.f5.com/csp/article/K98053339
- [oss-security] 20190819 [ANNOUNCE] Security release of Kubernetes v1.15.3, v1.14.6, v1.13.10 - CVE-2019-9512 and CVE-2019-9514 mailing-list
- https://security.netapp.com/advisory/ntap-20190823-0001/
- https://security.netapp.com/advisory/ntap-20190823-0004/
- https://security.netapp.com/advisory/ntap-20190823-0005/
- openSUSE-SU-2019:2000 vendor-advisory
- FEDORA-2019-5a6a7bc12c vendor-advisory
- FEDORA-2019-6a2980de56 vendor-advisory
- 20190825 [SECURITY] [DSA 4508-1] h2o security update mailing-list
- DSA-4508 vendor-advisory
- openSUSE-SU-2019:2056 vendor-advisory
- openSUSE-SU-2019:2072 vendor-advisory
- FEDORA-2019-55d101a740 vendor-advisory
- FEDORA-2019-65db7ad6c7 vendor-advisory
- openSUSE-SU-2019:2085 vendor-advisory
- RHSA-2019:2682 vendor-advisory
- DSA-4520 vendor-advisory
- RHSA-2019:2726 vendor-advisory
- 20190910 [SECURITY] [DSA 4520-1] trafficserver security update mailing-list
- RHSA-2019:2594 vendor-advisory
- openSUSE-SU-2019:2114 vendor-advisory
- openSUSE-SU-2019:2115 vendor-advisory
- RHSA-2019:2661 vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10296
- RHSA-2019:2690 vendor-advisory
- RHSA-2019:2766 vendor-advisory
- openSUSE-SU-2019:2130 vendor-advisory
- RHSA-2019:2796 vendor-advisory
- RHSA-2019:2861 vendor-advisory
- RHSA-2019:2925 vendor-advisory
- RHSA-2019:2939 vendor-advisory
- RHSA-2019:2955 vendor-advisory
- RHSA-2019:2966 vendor-advisory
- https://support.f5.com/csp/article/K98053339?utm_source=f5support&%3Butm_medium=RSS
- RHSA-2019:3131 vendor-advisory
- RHSA-2019:2769 vendor-advisory
- RHSA-2019:3245 vendor-advisory
- RHSA-2019:3265 vendor-advisory
- RHSA-2019:3892 vendor-advisory
- RHSA-2019:3906 vendor-advisory
- RHSA-2019:4018 vendor-advisory
- RHSA-2019:4019 vendor-advisory
- RHSA-2019:4021 vendor-advisory
- RHSA-2019:4020 vendor-advisory
- RHSA-2019:4045 vendor-advisory
- RHSA-2019:4042 vendor-advisory
- RHSA-2019:4040 vendor-advisory
- RHSA-2019:4041 vendor-advisory
- RHSA-2019:4269 vendor-advisory
- RHSA-2019:4273 vendor-advisory