We have released nghttp2 v1.39.2. This release addresses following security issues. Security Advisory CVE-2019-9511: Data Dribble CVE-2019-9513: Resource Loop
libnghttp2-1.39.2-alt1 -> sisyphus: Sun Sep 01 2019 Vladimir Lettiev <crux@altlinux> 1.39.2-alt1 - 1.39.2 (Closes: #37170) - Security fixes: CVE-2019-9511, CVE-2019-9513