Description
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nodejs | 10.16.3~dfsg-1 | — |
| Debian 14 | rust-h2 | 0.3.24-1 | — |
| Debian 13 | nodejs | 10.16.3~dfsg-1 | — |
| Debian 13 | rust-h2 | 0.3.24-1 | — |
| Debian 12 | h2o | 2.2.5+dfsg2-3 | — |
| Debian 12 | nodejs | 10.16.3~dfsg-1 | — |
| Debian 12 | rust-h2 | No fix yet | — |
| Debian 12 | trafficserver | 8.0.5+ds-1 | — |
| Debian 10 | golang-1.11 | 1.11.6-1+deb10u1 | DSA-4503-1 |
| Debian 10 | h2o | 2.2.5+dfsg2-2+deb10u1 | DSA-4508-1 |
| Debian 10 | nodejs | 10.19.0~dfsg1-1 | DSA-4669-1 |
| Debian 10 | trafficserver | 8.0.2+ds-1+deb10u1 | DSA-4520-1 |
| Debian 9 | golang-golang-x-net-dev | 1:0.0+git20161013.8b4af36+dfsg-3+deb9u1 | DLA-2485-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | grpc +1 | No fix yet | — |
| Ubuntu 25.10 | grpc +1 | No fix yet | — |
| Ubuntu 20.04 LTS | grpc +1 | No fix yet | — |
| Ubuntu 20.04 LTS | twisted | 18.9.0-6ubuntu1 | — |
| Ubuntu 18.04 LTS | grpc +5 | No fix yet | — |
| Ubuntu 18.04 LTS | twisted | 17.9.0-2ubuntu0.1 | USN-4308-1 |
| Ubuntu 16.04 LTS | grpc +4 | No fix yet | — |
| Ubuntu 16.04 LTS | twisted | 16.0.0-1ubuntu0.4 | USN-4308-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | h2o +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | netty | 1:4.1.7-4ubuntu0.1+esm1 | USN-4866-1 |
| Ubuntu Pro 16.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 14.04 LTS | nodejs | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | buildah | 1.5-6.gite94b4f9.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | buildah-tests | 1.9.0-5.module+el8.1.0+4240+893c1ab8 | RHSA-2019:4269 |
| RHEL 8 | cockpit-podman | 4-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | container-selinux | 2:2.94-1.git1e99f1d.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | fuse-overlayfs | 0.3-5.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | go-toolset | 1.11.13-1.module+el8.0.1+4087+d8180914 | RHSA-2019:2726 |
| RHEL 8 | golang +6 | 1.11.13-2.module+el8.0.1+4087+d8180914 | RHSA-2019:2726 |
| RHEL 8 | nodejs +2 | 1:10.16.3-2.module+el8.0.0+4214+49953fda | RHSA-2019:2925 |
| RHEL 8 | nodejs-nodemon | 1.18.3-1.module+el8+2632+6c5111ed | RHSA-2019:2925 |
| RHEL 8 | nodejs-packaging | 17-3.module+el8+2873+aa7dfd9a | RHSA-2019:2925 |
| RHEL 8 | npm | 1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda | RHSA-2019:2925 |
| RHEL 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.1.0+3468+011f0ab0 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | podman +1 | 1.0.0-4.git921f98f.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | podman-tests +2 | 1.4.2-6.module+el8.1.0+4830+f49150d7 | RHSA-2019:4269 |
| RHEL 8 | python-podman-api | 1.2.0-0.1.gitd0a45fe.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+4908+72a45cef | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | skopeo +1 | 1:0.1.32-6.git1715c90.module+el8.1.0+4903+9bde5d6c | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | skopeo-tests | 1:0.1.37-6.module+el8.1.0+4876+e678a192 | RHSA-2019:4269 |
| RHEL 8 | slirp4netns | 0.1-3.dev.gitc4e1bc5.module+el8.1.0+4308+9d868e48 | RHSA-2019:4273, RHSA-2019:4269 |
| RHEL 8 | toolbox | 0.0.4-1.module+el8.1.0+4081+b29780af | RHSA-2019:4269 |
| RHEL 3 | rh-nodejs10 +2 | 3.2-3.el7 | RHSA-2019:2939 |
| RHEL 3 | rh-nodejs10-nodejs +2 | 10.16.3-3.el7 | RHSA-2019:2939 |
| RHEL 3 | rh-nodejs10-npm | 6.9.0-10.16.3.3.el7 | RHSA-2019:2939 |
| RHEL 3 | rh-nodejs8 +2 | 3.0-5.el7 | RHSA-2019:2955 |
| RHEL 3 | rh-nodejs8-nodejs +2 | 8.16.1-2.el7 | RHSA-2019:2955 |
| RHEL 3 | rh-nodejs8-npm | 6.4.1-8.16.1.2.el7 | RHSA-2019:2955 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | containernetworking-plugins | 0.8.1-4.el7_7 | RHSA-2020:0406 |
| Red Hat Single Sign On 7 | rh-sso7-keycloak +1 | 4.8.15-1.Final_redhat_00001.1.el6sso | RHSA-2019:4042, RHSA-2019:4041, RHSA-2019:4040 |
| Red Hat OpenStack 14 | skydive +4 | 0.20.5-2.el7ost | RHSA-2019:2796 |
| Red Hat OpenShift 4 | ansible-operator +2 | 0.0.1-3.git.59.4beb3d2.el7 | RHSA-2019:3265 |
| Red Hat OpenShift 4 | ansible-service-broker +3 | 1:1.4.4-2.el7 | RHBA-2019:2819 |
| Red Hat OpenShift 4 | apb +2 | 2.0.3-2.el7 | RHSA-2019:3265, RHSA-2019:3245 |
| Red Hat OpenShift 4 | atomic-enterprise-service-catalog +1 | 1:4.1.14-201908290858.git.1.28cc9ff.el7 | RHSA-2019:2661 |
| Red Hat OpenShift 4 | containernetworking-plugins | 0.8.1-4.el7 | RHSA-2019:3265, RHSA-2019:3245 |
| Red Hat OpenShift 4 | cri-o | 1.13.11-0.10.dev.rhaos4.1.gitbdeb2ca.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | cri-tools | 1.13.0-2.rhaos4.1.gitc06001f.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | faq | 0.0.6-4.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | golang-github-openshift-prometheus-alert-buffer | 0-3.gitceca8c1.el7 | RHSA-2019:3265 |
| Red Hat OpenShift 4 | ignition +1 | 0.32.0-2.git5941fc0.el8 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | openshift +3 | 4.1.14-201908290858.git.0.3bd3467.el7 | RHSA-2019:2661 |
| Red Hat OpenShift 4 | openshift-eventrouter | 0.2-3.gited73fb6.el7 | RHSA-2019:3265 |
| Red Hat OpenShift 4 | openshift-external-storage +6 | 0.0.2-7.gitd3c94f0.el7 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | pivot | 0.0.5-2.el8 | RHSA-2019:3131 |
| Red Hat OpenShift 4 | prometheus-promu +1 | 0-5.git85ceabc.el7 | RHSA-2019:3265, RHSA-2019:3245 |
| Red Hat OpenShift 3 | ansible-service-broker +2 | 1.1.20-2.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | apb +2 | 1.9.8-1.el7 | RHBA-2019:3139 |
| Red Hat OpenShift 3 | atomic-enterprise-service-catalog +1 | 1:3.11.154-1.git.1.fa68ced.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift +13 | 3.9.101-1.git.0.150f595.el7 | RHSA-2019:2769, RHSA-2019:2690, RHBA-2019:3139 |
| Red Hat OpenShift 3 | atomic-openshift-cluster-autoscaler | 3.11.154-1.git.1.532da7a.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift-descheduler | 3.9.13-2.git.267.bb59a3f.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | atomic-openshift-dockerregistry | 3.9.101-1.git.1.13625cf.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | atomic-openshift-hyperkube +1 | 3.10.170-1.git.0.8e592d6.el7 | RHSA-2019:2690, RHBA-2019:3139 |
| Red Hat OpenShift 3 | atomic-openshift-metrics-server | 3.11.154-1.git.1.6a6b6ce.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift-node-problem-detector | 3.9.13-2.git.167.5d6b0d4.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | atomic-openshift-service-idler | 3.11.154-1.git.1.f80fb86.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | atomic-openshift-web-console | 3.9.101-1.git.1.601c6d2.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | cockpit +1 | 195-2.rhaos.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | containernetworking-plugins | 0.5.2-6.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | cri-o | 1.9.16-3.git858756d.el7 | RHSA-2019:2817, RHSA-2019:2769 |
| Red Hat OpenShift 3 | cri-tools | 1.0.0-6.rhaos3.9.git8e6013a.el7 | RHSA-2019:2769, RHBA-2019:3139 |
| Red Hat OpenShift 3 | csi-attacher | 0.2.0-4.git27299be.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | csi-driver-registrar | 0.2.0-2.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | csi-livenessprobe | 0.0.1-2.gitff5b6a0.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | csi-provisioner | 0.2.0-3.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | golang-github-openshift-oauth-proxy | 2.1-3.git885c9f40.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | golang-github-openshift-prometheus-alert-buffer | 0-3.gitceca8c1.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | hawkular-openshift-agent | 1.2.2-3.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | heapster | 1.3.0-4.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | image-inspector | 2.1.3-2.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-enterprise-autoheal | 3.11.154-1.git.1.13199be.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | openshift-enterprise-cluster-capacity | 3.11.154-1.git.1.5798c2c.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | openshift-enterprise-image-registry | 3.8.0-2.git.216.b6b90bb.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-eventrouter | 0.1-3.git5bd9251.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-external-storage +4 | 0.0.1-9.git78d6339.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | openshift-external-storage-cephfs-provisioner +1 | 0.0.2-9.gitd3c94f0.el7 | RHSA-2019:3906 |
| Red Hat OpenShift 3 | openshift-monitor-project-lifecycle | 3.11.51-2.git.59.7b59e29.el7 | RHBA-2019:3139 |
| Red Hat OpenShift 3 | openvswitch-ovn-kubernetes | 0.1.0-3.el7 | RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus +1 | 2.2.1-2.gitbc6058c.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus-alertmanager +1 | 0.14.0-2.git30af4d0.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus-node-exporter +1 | 3.9.101-1.git.1.8295224.el7 | RHSA-2019:3906, RHSA-2019:2769 |
| Red Hat OpenShift 3 | prometheus-promu +1 | 0-5.git85ceabc.el7 | RHSA-2019:2769 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-apache-commons-beanutils | 1.9.4-1.redhat_00002.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-infinispan +5 | 8.2.11-1.SP2_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jackson-databind | 2.8.11.5-1.redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-log4j-jboss-logmanager | 1.2.2-1.Final_redhat_00002.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-netty +1 | 4.1.45-1.Final_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-undertow | 1.4.18-12.SP12_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly +1 | 7.1.7-2.GA_redhat_00002.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly-elytron | 1.1.13-1.Final_redhat_00001.1.ep7.el7 | RHSA-2024:5856 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.2.10-1.redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-byte-buddy | 1.9.11-1.redhat_00002.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-glassfish-jsf | 2.3.5-5.SP3_redhat_00003.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.0.17-2.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.13-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.4.18-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-genericjms | 2.0.2-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-msc | 1.4.11-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.16-2.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +23 | 1.3.1-6.Final_redhat_00006.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-jboss-xnio-base | 3.7.6-2.SP1_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-picketbox +1 | 5.0.3-6.Final_redhat_00005.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-picketlink-api +9 | 2.5.5-20.SP12_redhat_00009.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-resteasy +19 | 3.6.1-7.SP7_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.0.26-2.SP3_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly +2 | 7.2.5-4.GA_redhat_00002.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron | 1.6.5-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron-tool | 1.4.4-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-http-client +4 | 1.0.17-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk8 +1 | 7.2.5-4.GA_redhat_00002.1.el7eap | RHSA-2019:4019 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl +1 | 1.0.8-1.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl-linux-x86_64 | 1.0.8-5.Final_redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat JBoss EAP 7 | eap7-yasson | 1.0.5-1.redhat_00001.1.el6eap | RHSA-2019:4020, RHSA-2019:4019, RHSA-2019:4018 |
| Red Hat Devtools 2019 | go-toolset-1.11 +3 | 1.11.13-1.el7 | RHSA-2019:2682 |
| Red Hat Devtools 2019 | go-toolset-1.11-golang +6 | 1.11.13-2.el7 | RHSA-2019:2682 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module_el8.3.0+2044+12421f43 | ALSA-2019:4273 |
| AlmaLinux 8 | fuse-overlayfs | 0.3-5.module_el8.3.0+2044+12421f43 | ALSA-2019:4273 |
| AlmaLinux 8 | nodejs-nodemon | 1.18.3-1.module_el8.3.0+2023+d2377ea3 | ALSA-2019:2925 |
| AlmaLinux 8 | nodejs-packaging | 17-3.module_el8.3.0+2023+d2377ea3 | ALSA-2019:2925 |
| AlmaLinux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module_el8.3.0+2044+12421f43 | ALSA-2019:4273, ALSA-2019:4269 |
| AlmaLinux 8 | oci-umount | 2:2.3.4-2.git87f9237.module_el8.3.0+2044+12421f43 | ALSA-2019:4273, ALSA-2019:4269 |
| AlmaLinux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module_el8.3.0+2044+12421f43 | ALSA-2019:4273 |
| AlmaLinux 8 | skopeo +1 | 1:0.1.32-6.git1715c90.module_el8.4.0+2478+12421f43 | ALSA-2019:4273 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
| Rocky Linux 8 | fuse-overlayfs | 0.3-5.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
| Rocky Linux 8 | nodejs-nodemon | 1.18.3-1.module+el8.3.0+101+f84c7154 | RLSA-2019:2925 |
| Rocky Linux 8 | nodejs-packaging | 17-3.module+el8.3.0+101+f84c7154 | RLSA-2019:2925 |
| Rocky Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273, RLSA-2019:4269 |
| Rocky Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273, RLSA-2019:4269 |
| Rocky Linux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
| Rocky Linux 8 | skopeo | 1:0.1.32-6.git1715c90.module+el8.4.0+557+48ba8b2f | RLSA-2019:4273 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | nodejs10 | 10.16.3-1.12.1 | SUSE-SU-2019:2259-1 |
| SLES 15 SP1 | nodejs8 | 8.16.1-3.20.1 | SUSE-SU-2019:2260-1 |
| SLES 15 | nodejs10 | 10.16.3-1.12.1 | SUSE-SU-2019:2259-1 |
| SLES 15 | nodejs8 | 8.16.1-3.20.1 | SUSE-SU-2019:2260-1 |
| SLES 12 | nodejs10 | 10.16.3-1.12.1 | SUSE-SU-2019:2254-1 |
| SLES 12 | nodejs12 | 12.13.0-1.3.1 | SUSE-SU-2020:0059-1 |
| SLES 11 SP4 | MozillaFirefox | 68.2.0-78.51.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | MozillaFirefox-branding-SLED | 68-21.9.8 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-atk | 2.26.1-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-cairo | 1.15.10-2.13.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gdk-pixbuf | 2.36.11-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-glib2 | 2.54.3-2.14.7 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gtk3 | 3.10.9-2.15.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-harfbuzz | 1.7.5-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi | 3.2.1.git259-2.3.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-pango | 1.40.14-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nspr | 4.21-29.6.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nss | 3.45-38.9.3 | SUSE-SU-2019:14246-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.11 | 1.11.13-10.5 | openSUSE-SU-2024:10804-1 |
| openSUSE Tumbleweed | go1.12 | 1.12.17-4.8 | openSUSE-SU-2024:10805-1 |
| openSUSE Leap 15.1 | go1.11 | 1.11.13-lp151.2.9.1 | openSUSE-SU-2019:2072-1 |
| openSUSE Leap 15.1 | go1.12 | 1.12.9-lp151.2.9.1 | openSUSE-SU-2019:2130-1, openSUSE-SU-2019:2085-1, openSUSE-SU-2019:2056-1 |
| openSUSE Leap 15.1 | nodejs10 | 10.16.3-lp151.2.6.1 | openSUSE-SU-2019:2114-1 |
| openSUSE Leap 15.1 | nodejs8 | 8.16.1-lp151.2.6.1 | openSUSE-SU-2019:2115-1 |
| openSUSE Leap 15.0 | go1.11 | 1.11.13-lp151.2.9.1 | openSUSE-SU-2019:2072-1 |
| openSUSE Leap 15.0 | go1.12 | 1.12.9-lp151.2.13.1 | openSUSE-SU-2019:2056-1 |
| openSUSE Leap 15.0 | nodejs10 | 10.16.3-lp151.2.6.1 | openSUSE-SU-2019:2114-1 |
| openSUSE Leap 15.0 | nodejs8 | 8.16.1-lp151.2.6.1 | openSUSE-SU-2019:2115-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | containerd | 1.2.9-r0 | — |
| Alpine v3.24 | go | 1.12.8-r0 | — |
| Alpine v3.24 | k3s | 0.8.1-r0 | — |
| Alpine v3.24 | nodejs | 10.16.3-r0 | — |
| Alpine v3.24 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.23 | containerd | 1.2.9-r0 | — |
| Alpine v3.23 | go | 1.12.8-r0 | — |
| Alpine v3.23 | k3s | 0.8.1-r0 | — |
| Alpine v3.23 | nodejs | 10.16.3-r0 | — |
| Alpine v3.23 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.22 | containerd | 1.2.9-r0 | — |
| Alpine v3.22 | go | 1.12.8-r0 | — |
| Alpine v3.22 | k3s | 0.8.1-r0 | — |
| Alpine v3.22 | nodejs | 10.16.3-r0 | — |
| Alpine v3.22 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.21 | containerd | 1.2.9-r0 | — |
| Alpine v3.21 | go | 1.12.8-r0 | — |
| Alpine v3.21 | k3s | 0.8.1-r0 | — |
| Alpine v3.21 | nodejs | 10.16.3-r0 | — |
| Alpine v3.21 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.20 | containerd | 1.2.9-r0 | — |
| Alpine v3.20 | go | 1.12.8-r0 | — |
| Alpine v3.20 | k3s | 0.8.1-r0 | — |
| Alpine v3.20 | nodejs | 10.16.3-r0 | — |
| Alpine v3.20 | py3-twisted | 19.10.0-r0 | — |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | containerd | 1.2.9-r0 | — |
| Alpine v3.19 | go | 1.12.8-r0 | — |
| Alpine v3.19 | h2o | 2.2.6-r0 | — |
| Alpine v3.19 | k3s | 0.8.1-r0 | — |
| Alpine v3.19 | nodejs | 10.16.3-r0 | — |
| Alpine v3.19 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.18 | containerd | 1.2.9-r0 | — |
| Alpine v3.18 | go | 1.12.8-r0 | — |
| Alpine v3.18 | h2o | 2.2.6-r0 | — |
| Alpine v3.18 | k3s | 0.8.1-r0 | — |
| Alpine v3.18 | nodejs | 10.16.3-r0 | — |
| Alpine v3.18 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.17 | containerd | 1.2.9-r0 | — |
| Alpine v3.17 | go | 1.12.8-r0 | — |
| Alpine v3.17 | h2o | 2.2.6-r0 | — |
| Alpine v3.17 | k3s | 0.8.1-r0 | — |
| Alpine v3.17 | nodejs | 10.16.3-r0 | — |
| Alpine v3.17 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.16 | containerd | 1.2.9-r0 | — |
| Alpine v3.16 | go | 1.12.8-r0 | — |
| Alpine v3.16 | h2o | 2.2.6-r0 | — |
| Alpine v3.16 | k3s | 0.8.1-r0 | — |
| Alpine v3.16 | nodejs | 10.16.3-r0 | — |
| Alpine v3.16 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.15 | containerd | 1.2.9-r0 | — |
| Alpine v3.15 | go | 1.12.8-r0 | — |
| Alpine v3.15 | h2o | 2.2.6-r0 | — |
| Alpine v3.15 | k3s | 0.8.1-r0 | — |
| Alpine v3.15 | nodejs | 10.16.3-r0 | — |
| Alpine v3.15 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.14 | containerd | 1.2.9-r0 | — |
| Alpine v3.14 | go | 1.12.8-r0 | — |
| Alpine v3.14 | h2o | 2.2.6-r0 | — |
| Alpine v3.14 | k3s | 0.8.1-r0 | — |
| Alpine v3.14 | nodejs | 10.16.3-r0 | — |
| Alpine v3.14 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.13 | containerd | 1.2.9-r0 | — |
| Alpine v3.13 | go | 1.12.8-r0 | — |
| Alpine v3.13 | h2o | 2.2.6-r0 | — |
| Alpine v3.13 | k3s | 0.8.1-r0 | — |
| Alpine v3.13 | nodejs | 10.16.3-r0 | — |
| Alpine v3.13 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.12 | containerd | 1.2.9-r0 | — |
| Alpine v3.12 | go | 1.12.8-r0 | — |
| Alpine v3.12 | h2o | 2.2.6-r0 | — |
| Alpine v3.12 | nodejs | 10.16.3-r0 | — |
| Alpine v3.12 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.11 | containerd | 1.2.9-r0 | — |
| Alpine v3.11 | go | 1.12.8-r0 | — |
| Alpine v3.11 | h2o | 2.2.6-r0 | — |
| Alpine v3.11 | nodejs | 10.16.3-r0 | — |
| Alpine v3.11 | py3-twisted | 19.10.0-r0 | — |
| Alpine v3.10 | containerd | 1.2.9-r0 | — |
| Alpine v3.10 | go | 1.12.8-r0 | — |
| Alpine v3.10 | nodejs | 10.16.3-r0 | — |
| Alpine v3.9 | nodejs | 10.16.3-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | golang +5 | 1.9.4-3.amzn2.0.2 | ALAS2-2019-1272 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-tensorboard | 2.16.2-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | buildah | 1.5-6.0.1.gite94b4f9.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | buildah-tests | 1.9.0-5.0.1.module+el8.1.0+5440+994fc847 | ELSA-2019-4269 |
| Oracle Linux 8 | cockpit-podman | 4-1.module+el8.1.0+5440+994fc847 | ELSA-2019-4269 |
| Oracle Linux 8 | container-selinux | 2:2.94-1.git1e99f1d.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | containernetworking-plugins | 0.7.4-4.git9ebe139.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | fuse-overlayfs | 0.3-5.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | go-toolset | 1.11.13-1.module+el8.0.1+5334+cadcb96c | ELSA-2019-2726 |
| Oracle Linux 8 | golang +6 | 1.11.13-2.module+el8.0.1+5334+cadcb96c | ELSA-2019-2726 |
| Oracle Linux 8 | nodejs +2 | 1:10.14.1-1.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | nodejs-nodemon | 1.18.3-1.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | nodejs-packaging | 17-3.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | npm | 1:6.4.1-1.10.14.1.1.module+el8.0.0+5349+4d6b561f | ELSA-2019-2925 |
| Oracle Linux 8 | oci-systemd-hook | 1:0.1.15-2.git2d0b8a3.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | oci-umount | 2:2.3.4-2.git87f9237.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | podman +1 | 1.0.0-4.git921f98f.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | podman-tests +2 | 1.4.2-6.0.1.module+el8.1.0+5460+5d763c32 | ELSA-2019-4269 |
| Oracle Linux 8 | python-podman-api | 1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847 | ELSA-2019-4269 |
| Oracle Linux 8 | runc | 1.0.0-56.rc5.dev.git2abd837.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | skopeo +1 | 1:0.1.32-6.0.1.git1715c90.module+el8.1.0+5459+24f6812a | ELSA-2019-4273, ELSA-2019-4269 |
| Oracle Linux 8 | skopeo-tests | 1:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32 | ELSA-2019-4269 |
| Oracle Linux 8 | slirp4netns | 0.1-3.dev.gitc4e1bc5.module+el8.1.0+5440+42cffa37 | ELSA-2019-4273, ELSA-2019-4269 |
Advisories 50
- ALSA-2019:2925 Important: nodejs:10 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2019:4269 Important: container-tools:rhel8 security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2019:4273 Important: container-tools:1.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:5856 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:0406 Red Hat Security Advisory: containernetworking-plugins security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4273 Red Hat Security Advisory: container-tools:1.0 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4269 Red Hat Security Advisory: container-tools:rhel8 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4041 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4042 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4040 Red Hat Security Advisory: Red Hat Single Sign-On 7.3.5 security update on RHEL 6 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4020 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4018 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:4019 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3906 Red Hat Security Advisory: OpenShift Container Platform 3.11 HTTP/2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3265 Red Hat Security Advisory: OpenShift Container Platform 4.1 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3131 Red Hat Security Advisory: OpenShift Container Platform 4.1.20 golang security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:3245 Red Hat Security Advisory: OpenShift Container Platform 4.2 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2955 Red Hat Security Advisory: rh-nodejs8-nodejs security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2939 Red Hat Security Advisory: rh-nodejs10-nodejs security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2925 Red Hat Security Advisory: nodejs:10 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2817 Red Hat Security Advisory: OpenShift Container Platform 3.11 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2796 Red Hat Security Advisory: skydive security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2769 Red Hat Security Advisory: OpenShift Container Platform 3.9 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2726 Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2682 Red Hat Security Advisory: go-toolset-1.11 and go-toolset-1.11-golang security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2690 Red Hat Security Advisory: OpenShift Container Platform 3.10 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2019:2661 Red Hat Security Advisory: Red Hat OpenShift Container Platform 4.1 openshift RPM security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHBA-2019:3139 Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHBA-2019:2819 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.1.17 packages update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- USN-4866-1 netty vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-4308-1 twisted vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-4508-1 h2o - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4520-1 trafficserver - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4669-1 nodejs - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4503-1 golang-1.11 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2485-1 golang-golang-x-net-dev - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2026-0426 Apache Traffic Server: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 16, 2026
- ELSA-2019-2726 Important: go-toolset:ol8 security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 16, 2026
- RLSA-2019:2925 Important: nodejs:10 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2019:4273 Important: container-tools:1.0 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2019:4269 Important: container-tools:rhel8 security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2019:2000-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2259-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2085-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2056-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2260-1 Security update for nodejs8 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0059-1 Security update for nodejs12 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10804-1 go1.11-1.11.13-10.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2130-1 Security update for go1.12 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2114-1 Security update for nodejs10 SUSE / openSUSE Security Updates · Feb 4, 2026
References
- VU#605641 third-party-advisory
- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
- [trafficserver-dev] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks mailing-list
- [trafficserver-users] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks mailing-list
- [trafficserver-announce] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks mailing-list
- 20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0 mailing-list
- 20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0 mailing-list
- https://www.synology.com/security/advisory/Synology_SA_19_33
- 20190819 [SECURITY] [DSA 4503-1] golang-1.11 security update mailing-list
- DSA-4503 vendor-advisory
- https://support.f5.com/csp/article/K01988340
- [oss-security] 20190819 [ANNOUNCE] Security release of Kubernetes v1.15.3, v1.14.6, v1.13.10 - CVE-2019-9512 and CVE-2019-9514 mailing-list
- https://security.netapp.com/advisory/ntap-20190823-0001/
- https://security.netapp.com/advisory/ntap-20190823-0004/
- https://security.netapp.com/advisory/ntap-20190823-0005/
- openSUSE-SU-2019:2000 vendor-advisory
- FEDORA-2019-5a6a7bc12c vendor-advisory
- FEDORA-2019-6a2980de56 vendor-advisory
- 20190825 [SECURITY] [DSA 4508-1] h2o security update mailing-list
- DSA-4508 vendor-advisory
- openSUSE-SU-2019:2056 vendor-advisory
- openSUSE-SU-2019:2072 vendor-advisory
- FEDORA-2019-55d101a740 vendor-advisory
- FEDORA-2019-65db7ad6c7 vendor-advisory
- openSUSE-SU-2019:2085 vendor-advisory
- RHSA-2019:2682 vendor-advisory
- DSA-4520 vendor-advisory
- RHSA-2019:2726 vendor-advisory
- 20190910 [SECURITY] [DSA 4520-1] trafficserver security update mailing-list
- RHSA-2019:2594 vendor-advisory
- openSUSE-SU-2019:2114 vendor-advisory
- openSUSE-SU-2019:2115 vendor-advisory
- RHSA-2019:2661 vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10296
- RHSA-2019:2690 vendor-advisory
- RHSA-2019:2766 vendor-advisory
- openSUSE-SU-2019:2130 vendor-advisory
- RHSA-2019:2796 vendor-advisory
- RHSA-2019:2861 vendor-advisory
- RHSA-2019:2925 vendor-advisory
- RHSA-2019:2939 vendor-advisory
- RHSA-2019:2955 vendor-advisory
- RHSA-2019:2966 vendor-advisory
- https://support.f5.com/csp/article/K01988340?utm_source=f5support&%3Butm_medium=RSS
- RHSA-2019:3131 vendor-advisory
- RHSA-2019:2769 vendor-advisory
- RHSA-2019:3245 vendor-advisory
- RHSA-2019:3265 vendor-advisory
- RHSA-2019:3892 vendor-advisory
- RHSA-2019:3906 vendor-advisory
- RHSA-2019:4018 vendor-advisory
- RHSA-2019:4019 vendor-advisory
- RHSA-2019:4021 vendor-advisory
- RHSA-2019:4020 vendor-advisory
- RHSA-2019:4045 vendor-advisory
- RHSA-2019:4042 vendor-advisory
- RHSA-2019:4040 vendor-advisory
- RHSA-2019:4041 vendor-advisory
- RHSA-2019:4269 vendor-advisory
- RHSA-2019:4273 vendor-advisory