ALSA-2024:3501: nghttp2 security update (Moderate)
Severity: Moderate
Description
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.
Security Fix(es):
nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
ALSA-2024:3501: nghttp2 security update (Moderate) Severity: Moderate Description libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.
Security Fix(es):
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages: libnghttp2-1.43.0-5.el9_4.3.aarch64 libnghttp2-1.43.0-5.el9_4.3.i686 libnghttp2-1.43.0-5.el9_4.3.ppc64le libnghttp2-1.43.0-5.el9_4.3.s390x libnghttp2-1.43.0-5.el9_4.3.x86_64 libnghttp2-devel-1.43.0-5.el9_4.3.aarch64 libnghttp2-devel-1.43.0-5.el9_4.3.i686 libnghttp2-devel-1.43.0-5.el9_4.3.ppc64le libnghttp2-devel-1.43.0-5.el9_4.3.s390x libnghttp2-devel-1.43.0-5.el9_4.3.x86_64 nghttp2-1.43.0-5.el9_4.3.aarch64 nghttp2-1.43.0-5.el9_4.3.ppc64le nghttp2-1.43.0-5.el9_4.3.s390x nghttp2-1.43.0-5.el9_4.3.x86_64