Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 11: DLA-3898-1 critical update: nghttp2 DoS risk

debian lts
Calendar Grey September 27, 2024
Dist Debian Esm H88
Debian LTS: DLA-3900-2 tackles OpenSSL vulnerability to mitigate potential threats; immediate upgrade suggested.
Unbounded number of HTTP/2 CONTINUATION frames that could cause DoS was fixed in nghttp2, an implementation of HTTP/2
Topics%20covered

Topics Covered

security advisory update Debian DoS nghttp2 HTTP/2

Summary

For Debian 11 bullseye, this problem has been fixed in version
1.43.0-1+deb11u2.

We recommend that you upgrade your nghttp2 packages.

For the detailed security status of nghttp2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/nghttp2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: nghttp2
Version: 1.43.0-1+deb11u2
CVE ID: CVE-2024-28182
Debian Bug: 1068415

Topics%20covered

Topics Covered

security advisory update Debian DoS nghttp2 HTTP/2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here