Issued at: 2024-06-14
Updated at: 2024-06-14
Synopsis
Moderate: nghttp2 security update
Description
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.
Security Fix(es):
* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2268639
CVEs
CVE-2024-28182
Affected packages
Rocky Linux 9 aarch64 - BaseOS
libnghttp2-0:1.43.0-5.el9_4.3.aarch64.rpm
libnghttp2-debuginfo-0:1.43.0-5.el9_4.3.aarch64.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
Rocky Linux 9 x86_64 - BaseOS
libnghttp2-0:1.43.0-5.el9_4.3.i686.rpm
libnghttp2-0:1.43.0-5.el9_4.3.x86_64.rpm
libnghttp2-debuginfo-0:1.43.0-5.el9_4.3.x86_64.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
Rocky Linux 9 ppc64le - BaseOS
libnghttp2-0:1.43.0-5.el9_4.3.ppc64le.rpm
libnghttp2-debuginfo-0:1.43.0-5.el9_4.3.ppc64le.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
Rocky Linux 9 s390x - BaseOS
libnghttp2-0:1.43.0-5.el9_4.3.s390x.rpm
libnghttp2-debuginfo-0:1.43.0-5.el9_4.3.s390x.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
Rocky Linux 9 aarch64 - CRB
libnghttp2-devel-0:1.43.0-5.el9_4.3.aarch64.rpm
nghttp2-0:1.43.0-5.el9_4.3.aarch64.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
nghttp2-debuginfo-0:1.43.0-5.el9_4.3.aarch64.rpm
nghttp2-debugsource-0:1.43.0-5.el9_4.3.aarch64.rpm
Rocky Linux 9 x86_64 - CRB
libnghttp2-devel-0:1.43.0-5.el9_4.3.i686.rpm
libnghttp2-devel-0:1.43.0-5.el9_4.3.x86_64.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
nghttp2-0:1.43.0-5.el9_4.3.x86_64.rpm
nghttp2-debuginfo-0:1.43.0-5.el9_4.3.x86_64.rpm
nghttp2-debugsource-0:1.43.0-5.el9_4.3.x86_64.rpm
Rocky Linux 9 ppc64le - CRB
libnghttp2-devel-0:1.43.0-5.el9_4.3.ppc64le.rpm
nghttp2-0:1.43.0-5.el9_4.3.ppc64le.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
nghttp2-debuginfo-0:1.43.0-5.el9_4.3.ppc64le.rpm
nghttp2-debugsource-0:1.43.0-5.el9_4.3.ppc64le.rpm
Rocky Linux 9 s390x - CRB
libnghttp2-devel-0:1.43.0-5.el9_4.3.s390x.rpm
nghttp2-0:1.43.0-5.el9_4.3.s390x.rpm
nghttp2-0:1.43.0-5.el9_4.3.src.rpm
nghttp2-debuginfo-0:1.43.0-5.el9_4.3.s390x.rpm
nghttp2-debugsource-0:1.43.0-5.el9_4.3.s390x.rpm