Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0090-1

Опубликовано: 11 янв. 2024
Источник: suse-cvrf

Описание

Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues:

  • CVE-2022-31394: Fixed a potential denial of service in the HTTP/2 implementation (bsc#1208556).

Список пакетов

SUSE Linux Enterprise Module for Desktop Applications 15 SP5
gstreamer-plugins-rs-0.8.2-150400.3.3.1
gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1
SUSE Linux Enterprise Real Time 15 SP4
gstreamer-plugins-rs-0.8.2-150400.3.3.1
gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1

Ссылки

Описание

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.

Затронутые продукты
SUSE Linux Enterprise Module for Desktop Applications 15 SP5:gstreamer-plugins-rs-0.8.2-150400.3.3.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5:gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1
SUSE Linux Enterprise Real Time 15 SP4:gstreamer-plugins-rs-0.8.2-150400.3.3.1
SUSE Linux Enterprise Real Time 15 SP4:gstreamer-plugins-rs-devel-0.8.2-150400.3.3.1
Ссылки