Important: dotnet6.0 security update

HTTP/2 Stream Cancellation Attack

ELSA-2023-6746: nghttp2 security update (IMPORTANT)

ELSA-2023-6120: nginx:1.22 security update (MODERATE)

ELSA-2023-5989: varnish security update (IMPORTANT)

ELSA-2023-5929: tomcat security update (IMPORTANT)

ELSA-2023-5928: tomcat security update (IMPORTANT)

ELSA-2023-5924: varnish security update (IMPORTANT)

ELSA-2023-5850: nodejs:16 security update (IMPORTANT)

ELSA-2023-5838: nghttp2 security update (IMPORTANT)

ELSA-2023-5837: nghttp2 security update (IMPORTANT)

ELSA-2023-5765: nodejs security update (IMPORTANT)

ELSA-2023-5749: .NET 7.0 security update (IMPORTANT)

ELSA-2023-5713: nginx:1.22 security update (MODERATE)

ELSA-2023-5712: nginx:1.20 security update (MODERATE)

ELSA-2023-5711: nginx security update (MODERATE)

ELSA-2023-5710: dotnet6.0 security update (IMPORTANT)

ELSA-2023-5709: dotnet7.0 security update (IMPORTANT)

ELSA-2023-5708: dotnet6.0 security update (IMPORTANT)

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.