These are all security issues fixed in the libnghttp2-14-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "libnghttp2-devel": "1.17.0-1.1", "libnghttp2_asio1-32bit": "1.17.0-1.1", "libnghttp2-14": "1.17.0-1.1", "nghttp2": "1.17.0-1.1", "nghttp2-doc": "1.17.0-1.1", "libnghttp2_asio1": "1.17.0-1.1", "python-nghttp2": "1.17.0-1.1", "libnghttp2_asio-devel": "1.17.0-1.1", "libnghttp2-14-32bit": "1.17.0-1.1" } ] }