Astra Linux – vulnerability in python-h2

h2 is a pure-Python implementation of an HTTP/2 protocol stack. Versions up to and including 4.4.0 allow request header blocks containing multiple Host headers; each Host header is forwarded to the consuming application. When a consumer downgrades HTTP/2 to HTTP/1.1, the resulting request include...