{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for nghttp2",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for nghttp2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358).\n- CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184).\n- CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#1146182).\n- CVE-2018-1000168: Fixed ALTSVC frame client side denial of service (bsc#1088639).\n- CVE-2016-1544: Fixed out of memory due to unlimited incoming HTTP header fields (bsc#966514).\n\nBug fixes and enhancements:\n\n- Packages must not mark license files as %doc (bsc#1082318)\n- Typo in description of libnghttp2_asio1 (bsc#962914)\n- Fixed mistake in spec file (bsc#1125689)\n- Fixed build issue with boost 1.70.0 (bsc#1134616)\n- Fixed build issue with GCC 6 (bsc#964140)\n- Feature: Add W&S module (FATE#326776, bsc#1112438)\n  ",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "HPE-Helion-OpenStack-8-2021-932,SUSE-2021-932,SUSE-OpenStack-Cloud-7-2021-932,SUSE-OpenStack-Cloud-8-2021-932,SUSE-OpenStack-Cloud-9-2021-932,SUSE-OpenStack-Cloud-Crowbar-8-2021-932,SUSE-OpenStack-Cloud-Crowbar-9-2021-932,SUSE-SLE-SAP-12-SP2-2021-932,SUSE-SLE-SAP-12-SP3-2021-932,SUSE-SLE-SAP-12-SP4-2021-932,SUSE-SLE-SERVER-12-SP2-2021-932,SUSE-SLE-SERVER-12-SP2-BCL-2021-932,SUSE-SLE-SERVER-12-SP3-2021-932,SUSE-SLE-SERVER-12-SP3-BCL-2021-932,SUSE-SLE-SERVER-12-SP4-LTSS-2021-932,SUSE-SLE-SERVER-12-SP5-2021-932",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_0932-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2021:0932-1",
            url: "https://www.suse.com/support/update/announcement/2021/suse-su-20210932-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2021:0932-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1082318",
            url: "https://bugzilla.suse.com/1082318",
         },
         {
            category: "self",
            summary: "SUSE Bug 1088639",
            url: "https://bugzilla.suse.com/1088639",
         },
         {
            category: "self",
            summary: "SUSE Bug 1112438",
            url: "https://bugzilla.suse.com/1112438",
         },
         {
            category: "self",
            summary: "SUSE Bug 1125689",
            url: "https://bugzilla.suse.com/1125689",
         },
         {
            category: "self",
            summary: "SUSE Bug 1134616",
            url: "https://bugzilla.suse.com/1134616",
         },
         {
            category: "self",
            summary: "SUSE Bug 1146182",
            url: "https://bugzilla.suse.com/1146182",
         },
         {
            category: "self",
            summary: "SUSE Bug 1146184",
            url: "https://bugzilla.suse.com/1146184",
         },
         {
            category: "self",
            summary: "SUSE Bug 1181358",
            url: "https://bugzilla.suse.com/1181358",
         },
         {
            category: "self",
            summary: "SUSE Bug 962914",
            url: "https://bugzilla.suse.com/962914",
         },
         {
            category: "self",
            summary: "SUSE Bug 964140",
            url: "https://bugzilla.suse.com/964140",
         },
         {
            category: "self",
            summary: "SUSE Bug 966514",
            url: "https://bugzilla.suse.com/966514",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1544 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1544/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-1000168 page",
            url: "https://www.suse.com/security/cve/CVE-2018-1000168/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9511 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9511/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9513 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9513/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11080 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11080/",
         },
      ],
      title: "Security update for nghttp2",
      tracking: {
         current_release_date: "2021-03-24T11:13:09Z",
         generator: {
            date: "2021-03-24T11:13:09Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2021:0932-1",
         initial_release_date: "2021-03-24T11:13:09Z",
         revision_history: [
            {
               date: "2021-03-24T11:13:09Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-1.39.2-3.5.1.aarch64",
                        product: {
                           name: "libnghttp2-14-1.39.2-3.5.1.aarch64",
                           product_id: "libnghttp2-14-1.39.2-3.5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-devel-1.39.2-3.5.1.aarch64",
                        product: {
                           name: "libnghttp2-devel-1.39.2-3.5.1.aarch64",
                           product_id: "libnghttp2-devel-1.39.2-3.5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio-devel-1.39.2-3.5.1.aarch64",
                        product: {
                           name: "libnghttp2_asio-devel-1.39.2-3.5.1.aarch64",
                           product_id: "libnghttp2_asio-devel-1.39.2-3.5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-1.39.2-3.5.1.aarch64",
                        product: {
                           name: "libnghttp2_asio1-1.39.2-3.5.1.aarch64",
                           product_id: "libnghttp2_asio1-1.39.2-3.5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nghttp2-1.39.2-3.5.1.aarch64",
                        product: {
                           name: "nghttp2-1.39.2-3.5.1.aarch64",
                           product_id: "nghttp2-1.39.2-3.5.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nghttp2-1.39.2-3.5.1.aarch64",
                        product: {
                           name: "python3-nghttp2-1.39.2-3.5.1.aarch64",
                           product_id: "python3-nghttp2-1.39.2-3.5.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-64bit-1.39.2-3.5.1.aarch64_ilp32",
                        product: {
                           name: "libnghttp2-14-64bit-1.39.2-3.5.1.aarch64_ilp32",
                           product_id: "libnghttp2-14-64bit-1.39.2-3.5.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-64bit-1.39.2-3.5.1.aarch64_ilp32",
                        product: {
                           name: "libnghttp2_asio1-64bit-1.39.2-3.5.1.aarch64_ilp32",
                           product_id: "libnghttp2_asio1-64bit-1.39.2-3.5.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-1.39.2-3.5.1.i586",
                        product: {
                           name: "libnghttp2-14-1.39.2-3.5.1.i586",
                           product_id: "libnghttp2-14-1.39.2-3.5.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-devel-1.39.2-3.5.1.i586",
                        product: {
                           name: "libnghttp2-devel-1.39.2-3.5.1.i586",
                           product_id: "libnghttp2-devel-1.39.2-3.5.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio-devel-1.39.2-3.5.1.i586",
                        product: {
                           name: "libnghttp2_asio-devel-1.39.2-3.5.1.i586",
                           product_id: "libnghttp2_asio-devel-1.39.2-3.5.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-1.39.2-3.5.1.i586",
                        product: {
                           name: "libnghttp2_asio1-1.39.2-3.5.1.i586",
                           product_id: "libnghttp2_asio1-1.39.2-3.5.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nghttp2-1.39.2-3.5.1.i586",
                        product: {
                           name: "nghttp2-1.39.2-3.5.1.i586",
                           product_id: "nghttp2-1.39.2-3.5.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nghttp2-1.39.2-3.5.1.i586",
                        product: {
                           name: "python3-nghttp2-1.39.2-3.5.1.i586",
                           product_id: "python3-nghttp2-1.39.2-3.5.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
                        product: {
                           name: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
                           product_id: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-devel-1.39.2-3.5.1.ppc64le",
                        product: {
                           name: "libnghttp2-devel-1.39.2-3.5.1.ppc64le",
                           product_id: "libnghttp2-devel-1.39.2-3.5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio-devel-1.39.2-3.5.1.ppc64le",
                        product: {
                           name: "libnghttp2_asio-devel-1.39.2-3.5.1.ppc64le",
                           product_id: "libnghttp2_asio-devel-1.39.2-3.5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-1.39.2-3.5.1.ppc64le",
                        product: {
                           name: "libnghttp2_asio1-1.39.2-3.5.1.ppc64le",
                           product_id: "libnghttp2_asio1-1.39.2-3.5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nghttp2-1.39.2-3.5.1.ppc64le",
                        product: {
                           name: "nghttp2-1.39.2-3.5.1.ppc64le",
                           product_id: "nghttp2-1.39.2-3.5.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nghttp2-1.39.2-3.5.1.ppc64le",
                        product: {
                           name: "python3-nghttp2-1.39.2-3.5.1.ppc64le",
                           product_id: "python3-nghttp2-1.39.2-3.5.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-1.39.2-3.5.1.s390",
                        product: {
                           name: "libnghttp2-14-1.39.2-3.5.1.s390",
                           product_id: "libnghttp2-14-1.39.2-3.5.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-devel-1.39.2-3.5.1.s390",
                        product: {
                           name: "libnghttp2-devel-1.39.2-3.5.1.s390",
                           product_id: "libnghttp2-devel-1.39.2-3.5.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio-devel-1.39.2-3.5.1.s390",
                        product: {
                           name: "libnghttp2_asio-devel-1.39.2-3.5.1.s390",
                           product_id: "libnghttp2_asio-devel-1.39.2-3.5.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-1.39.2-3.5.1.s390",
                        product: {
                           name: "libnghttp2_asio1-1.39.2-3.5.1.s390",
                           product_id: "libnghttp2_asio1-1.39.2-3.5.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nghttp2-1.39.2-3.5.1.s390",
                        product: {
                           name: "nghttp2-1.39.2-3.5.1.s390",
                           product_id: "nghttp2-1.39.2-3.5.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nghttp2-1.39.2-3.5.1.s390",
                        product: {
                           name: "python3-nghttp2-1.39.2-3.5.1.s390",
                           product_id: "python3-nghttp2-1.39.2-3.5.1.s390",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-1.39.2-3.5.1.s390x",
                        product: {
                           name: "libnghttp2-14-1.39.2-3.5.1.s390x",
                           product_id: "libnghttp2-14-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                        product: {
                           name: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                           product_id: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-devel-1.39.2-3.5.1.s390x",
                        product: {
                           name: "libnghttp2-devel-1.39.2-3.5.1.s390x",
                           product_id: "libnghttp2-devel-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio-devel-1.39.2-3.5.1.s390x",
                        product: {
                           name: "libnghttp2_asio-devel-1.39.2-3.5.1.s390x",
                           product_id: "libnghttp2_asio-devel-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-1.39.2-3.5.1.s390x",
                        product: {
                           name: "libnghttp2_asio1-1.39.2-3.5.1.s390x",
                           product_id: "libnghttp2_asio1-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-32bit-1.39.2-3.5.1.s390x",
                        product: {
                           name: "libnghttp2_asio1-32bit-1.39.2-3.5.1.s390x",
                           product_id: "libnghttp2_asio1-32bit-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nghttp2-1.39.2-3.5.1.s390x",
                        product: {
                           name: "nghttp2-1.39.2-3.5.1.s390x",
                           product_id: "nghttp2-1.39.2-3.5.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nghttp2-1.39.2-3.5.1.s390x",
                        product: {
                           name: "python3-nghttp2-1.39.2-3.5.1.s390x",
                           product_id: "python3-nghttp2-1.39.2-3.5.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libnghttp2-14-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "libnghttp2-14-1.39.2-3.5.1.x86_64",
                           product_id: "libnghttp2-14-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                           product_id: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2-devel-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "libnghttp2-devel-1.39.2-3.5.1.x86_64",
                           product_id: "libnghttp2-devel-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio-devel-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "libnghttp2_asio-devel-1.39.2-3.5.1.x86_64",
                           product_id: "libnghttp2_asio-devel-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "libnghttp2_asio1-1.39.2-3.5.1.x86_64",
                           product_id: "libnghttp2_asio1-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libnghttp2_asio1-32bit-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "libnghttp2_asio1-32bit-1.39.2-3.5.1.x86_64",
                           product_id: "libnghttp2_asio1-32bit-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nghttp2-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "nghttp2-1.39.2-3.5.1.x86_64",
                           product_id: "nghttp2-1.39.2-3.5.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nghttp2-1.39.2-3.5.1.x86_64",
                        product: {
                           name: "python3-nghttp2-1.39.2-3.5.1.x86_64",
                           product_id: "python3-nghttp2-1.39.2-3.5.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "HPE Helion OpenStack 8",
                        product: {
                           name: "HPE Helion OpenStack 8",
                           product_id: "HPE Helion OpenStack 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:hpe-helion-openstack:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 7",
                        product: {
                           name: "SUSE OpenStack Cloud 7",
                           product_id: "SUSE OpenStack Cloud 7",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:7",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 8",
                        product: {
                           name: "SUSE OpenStack Cloud 8",
                           product_id: "SUSE OpenStack Cloud 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 9",
                        product: {
                           name: "SUSE OpenStack Cloud 9",
                           product_id: "SUSE OpenStack Cloud 9",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:9",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud Crowbar 8",
                        product: {
                           name: "SUSE OpenStack Cloud Crowbar 8",
                           product_id: "SUSE OpenStack Cloud Crowbar 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud Crowbar 9",
                        product: {
                           name: "SUSE OpenStack Cloud Crowbar 9",
                           product_id: "SUSE OpenStack Cloud Crowbar 9",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:9",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2-BCL",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2-BCL",
                           product_id: "SUSE Linux Enterprise Server 12 SP2-BCL",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-bcl:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3-BCL",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3-BCL",
                           product_id: "SUSE Linux Enterprise Server 12 SP3-BCL",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-bcl:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP5",
                           product_id: "SUSE Linux Enterprise Server 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of HPE Helion OpenStack 8",
               product_id: "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "HPE Helion OpenStack 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.s390x as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud 8",
               product_id: "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
               product_id: "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            },
            product_reference: "libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-1544",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1544",
            },
         ],
         notes: [
            {
               category: "general",
               text: "nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1544",
               url: "https://www.suse.com/security/cve/CVE-2016-1544",
            },
            {
               category: "external",
               summary: "SUSE Bug 966514 for CVE-2016-1544",
               url: "https://bugzilla.suse.com/966514",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-03-24T11:13:09Z",
               details: "low",
            },
         ],
         title: "CVE-2016-1544",
      },
      {
         cve: "CVE-2018-1000168",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-1000168",
            },
         ],
         notes: [
            {
               category: "general",
               text: "nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-1000168",
               url: "https://www.suse.com/security/cve/CVE-2018-1000168",
            },
            {
               category: "external",
               summary: "SUSE Bug 1088639 for CVE-2018-1000168",
               url: "https://bugzilla.suse.com/1088639",
            },
            {
               category: "external",
               summary: "SUSE Bug 1097401 for CVE-2018-1000168",
               url: "https://bugzilla.suse.com/1097401",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-03-24T11:13:09Z",
               details: "moderate",
            },
         ],
         title: "CVE-2018-1000168",
      },
      {
         cve: "CVE-2019-9511",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9511",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9511",
               url: "https://www.suse.com/security/cve/CVE-2019-9511",
            },
            {
               category: "external",
               summary: "SUSE Bug 1145579 for CVE-2019-9511",
               url: "https://bugzilla.suse.com/1145579",
            },
            {
               category: "external",
               summary: "SUSE Bug 1146091 for CVE-2019-9511",
               url: "https://bugzilla.suse.com/1146091",
            },
            {
               category: "external",
               summary: "SUSE Bug 1146182 for CVE-2019-9511",
               url: "https://bugzilla.suse.com/1146182",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193427 for CVE-2019-9511",
               url: "https://bugzilla.suse.com/1193427",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202787 for CVE-2019-9511",
               url: "https://bugzilla.suse.com/1202787",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-03-24T11:13:09Z",
               details: "important",
            },
         ],
         title: "CVE-2019-9511",
      },
      {
         cve: "CVE-2019-9513",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9513",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9513",
               url: "https://www.suse.com/security/cve/CVE-2019-9513",
            },
            {
               category: "external",
               summary: "SUSE Bug 1145580 for CVE-2019-9513",
               url: "https://bugzilla.suse.com/1145580",
            },
            {
               category: "external",
               summary: "SUSE Bug 1146094 for CVE-2019-9513",
               url: "https://bugzilla.suse.com/1146094",
            },
            {
               category: "external",
               summary: "SUSE Bug 1146184 for CVE-2019-9513",
               url: "https://bugzilla.suse.com/1146184",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193427 for CVE-2019-9513",
               url: "https://bugzilla.suse.com/1193427",
            },
            {
               category: "external",
               summary: "SUSE Bug 1202787 for CVE-2019-9513",
               url: "https://bugzilla.suse.com/1202787",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-03-24T11:13:09Z",
               details: "important",
            },
         ],
         title: "CVE-2019-9513",
      },
      {
         cve: "CVE-2020-11080",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11080",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., > 32), then drop the connection.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
               "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11080",
               url: "https://www.suse.com/security/cve/CVE-2020-11080",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172441 for CVE-2020-11080",
               url: "https://bugzilla.suse.com/1172441",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172442 for CVE-2020-11080",
               url: "https://bugzilla.suse.com/1172442",
            },
            {
               category: "external",
               summary: "SUSE Bug 1181358 for CVE-2020-11080",
               url: "https://bugzilla.suse.com/1181358",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.s390x",
                  "SUSE OpenStack Cloud 7:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-1.39.2-3.5.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:libnghttp2-14-32bit-1.39.2-3.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-03-24T11:13:09Z",
               details: "important",
            },
         ],
         title: "CVE-2020-11080",
      },
   ],
}