UbuntuUpdates.org

Package "nghttp2"

Name: nghttp2

Description:

server, proxy and client implementing HTTP/2
Latest version: 1.43.0-1ubuntu0.2
Release: jammy (22.04)
Level: security
Repository: universe
Homepage: https://nghttp2.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "nghttp2"

All arch deb package
APT INSTALL

Other versions of "nghttp2" in Jammy

Repository Area Version
base main 1.43.0-1build3
base universe 1.43.0-1build3
security main 1.43.0-1ubuntu0.2
updates main 1.43.0-1ubuntu0.2
updates universe 1.43.0-1ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.43.0-1ubuntu0.2 2024-04-26 00:07:11 UTC

  nghttp2 (1.43.0-1ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: HTTP/2 protocol denial of service
    - debian/patches/CVE-2024-28182-1.patch: Add
      nghttp2_option_set_max_continuations
    - debian/patches/CVE-2024-28182-2.patch: Limit CONTINUATION frames
      following an incoming HEADER frame
    - CVE-2024-28182

 -- Fabian Toepfer <email address hidden> Thu, 18 Apr 2024 09:14:38 +0200
Source diff to previous version
CVE-2024-28182 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbound

Version: 1.43.0-1ubuntu0.1 2023-11-22 16:07:06 UTC

  nghttp2 (1.43.0-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: HTTP/2 protocol denial of service
    - debian/patches/CVE-2023-44487.patch: implement stream reset rate
      limiting.
    - CVE-2023-44487

 -- Marc Deslauriers <email address hidden> Wed, 11 Oct 2023 13:50:35 -0400
CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consum ...


About   -   Send Feedback to @ubuntu_updates