SUSE-SU-2024:1167-1

Опубликовано: 08 апр. 2024

Источник: suse-cvrf

Описание

Security update for nghttp2

This update for nghttp2 fixes the following issues:

CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)

Список пакетов

Container bci/golang:1.20-openssl

libnghttp2-14-1.40.0-150200.17.1

Container bci/golang:1.21

libnghttp2-14-1.40.0-150200.17.1

Container bci/golang:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/node:18

libnghttp2-14-1.40.0-150200.17.1

Container bci/nodejs:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/openjdk:11

libnghttp2-14-1.40.0-150200.17.1

Container bci/openjdk:17

libnghttp2-14-1.40.0-150200.17.1

Container bci/php-apache:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/php-fpm:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/php:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/python:3

libnghttp2-14-1.40.0-150200.17.1

Container bci/python:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/ruby:latest

libnghttp2-14-1.40.0-150200.17.1

Container bci/rust:1.77

libnghttp2-14-1.40.0-150200.17.1

Container bci/rust:latest

libnghttp2-14-1.40.0-150200.17.1

Container rancher/elemental-teal-rt/5.4:latest

libnghttp2-14-1.40.0-150200.17.1

Container rancher/elemental-teal/5.4:latest

libnghttp2-14-1.40.0-150200.17.1

Container rancher/seedimage-builder:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/git:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/ltss/sle15.3/bci-base:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/ltss/sle15.4/bci-base:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/ltss/sle15.5/sle15:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/manager/4.3/proxy-httpd:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/manager/4.3/proxy-salt-broker:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro-rancher/5.2:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro-rancher/5.3:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro-rancher/5.4:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/5.1/toolbox:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/5.2/toolbox:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/5.3/toolbox:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/5.4/toolbox:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/5.5/toolbox:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/5.5:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/base-5.5:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/kvm-5.5:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle-micro/rt-5.5:latest

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle15:15.2

libnghttp2-14-1.40.0-150200.17.1

Container suse/sle15:15.5

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-BYOS-EC2-HVM

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-CHOST-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-CHOST-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-CHOST-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-HPC-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-HPC-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-SAP-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-SAP-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP3-SAPCAL-Azure

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP3-SAPCAL-GCE

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-CHOST-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-CHOST-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-CHOST-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-CHOST-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-HPC-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-HPC-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-HPC-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-HPC-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-HPC-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-HPC-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Hardened-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Hardened-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Hardened-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Hardened-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-3

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-3-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-3-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-Micro-5-4-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Azure

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-EC2

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAP-GCE

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAP-Hardened-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP4-SAPCAL

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAPCAL-Azure

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAPCAL-EC2

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP4-SAPCAL-GCE

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP5-Azure-3P

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Azure-Basic

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Azure-Standard

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-CHOST-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-CHOST-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-CHOST-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-CHOST-BYOS-GDC

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-HPC-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-HPC-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-HPC-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-HPC-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Hardened-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Hardened-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Hardened-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-Micro-5-5-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Azure-3P

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Hardened-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAP-Hardened-GCE

libnghttp2-14-1.40.0-150200.17.1

Image SLES15-SP5-SAPCAL-Azure

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP5-SAPCAL-EC2

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

Image SLES15-SP5-SAPCAL-GCE

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

SUSE Enterprise Storage 7.1

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Micro 5.1

libnghttp2-14-1.40.0-150200.17.1

SUSE Linux Enterprise Micro 5.2

libnghttp2-14-1.40.0-150200.17.1

SUSE Linux Enterprise Micro 5.3

libnghttp2-14-1.40.0-150200.17.1

SUSE Linux Enterprise Micro 5.4

libnghttp2-14-1.40.0-150200.17.1

SUSE Linux Enterprise Micro 5.5

libnghttp2-14-1.40.0-150200.17.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Server 15 SP2-LTSS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Manager Proxy 4.3

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

SUSE Manager Server 4.3

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

openSUSE Leap 15.5

libnghttp2-14-1.40.0-150200.17.1

libnghttp2-14-32bit-1.40.0-150200.17.1

libnghttp2-devel-1.40.0-150200.17.1

libnghttp2_asio-devel-1.40.0-150200.17.1

libnghttp2_asio1-1.40.0-150200.17.1

libnghttp2_asio1-32bit-1.40.0-150200.17.1

nghttp2-1.40.0-150200.17.1

python3-nghttp2-1.40.0-150200.17.1

openSUSE Leap Micro 5.3

libnghttp2-14-1.40.0-150200.17.1

openSUSE Leap Micro 5.4

libnghttp2-14-1.40.0-150200.17.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241167-1/
Link for SUSE-SU-2024:1167-1
https://lists.suse.com/pipermail/sle-updates/2024-April/034897.html
E-Mail link for SUSE-SU-2024:1167-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1221399
SUSE Bug 1221399
https://www.suse.com/security/cve/CVE-2024-28182/
SUSE CVE CVE-2024-28182 page

Описание

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.

Затронутые продукты

Container bci/golang:1.20-openssl:libnghttp2-14-1.40.0-150200.17.1

Container bci/golang:1.21:libnghttp2-14-1.40.0-150200.17.1

Container bci/golang:latest:libnghttp2-14-1.40.0-150200.17.1

Container bci/node:18:libnghttp2-14-1.40.0-150200.17.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-28182.html
CVE-2024-28182
https://bugzilla.suse.com/1221399
SUSE Bug 1221399