[slackware-security] nghttp2

🗓️ 11 Oct 2023 06:45:34Reported by Slackware Linux ProjectType

slackware🔗 www.slackware.com👁 54 Views

New nghttp2 packages for Slackware 15.0 and -current to fix HTTP/2 Rapid Reset vulnerability

Reporter	Title	Published	Views	Family All 2817
OSV	RHSA-2023:6179 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update	4 Apr 202610:01	–	osv
OSV	RHSA-2023:6298 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.2 security update	2 Oct 202411:29	–	osv
OSV	RHSA-2023:6746 Red Hat Security Advisory: nghttp2 security update	30 Sep 202411:05	–	osv
OSV	RHSA-2023:6781 Red Hat Security Advisory: openshift-pipelines-client security update	2 Oct 202411:30	–	osv
OSV	RHSA-2023:6782 Red Hat Security Advisory: openshift-gitops-kam security update	1 Oct 202423:27	–	osv
OSV	RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update	2 Oct 202411:32	–	osv
OSV	RHSA-2023:6839 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update	2 Oct 202411:32	–	osv
OSV	RHSA-2023:6840 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update	2 Oct 202411:32	–	osv
OSV	RHSA-2023:7205 Red Hat Security Advisory: nodejs:20 security update	22 Oct 202401:55	–	osv
OSV	RHSA-2023:7288 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update	1 Oct 202423:31	–	osv

OS	OS Version	Architecture	Package	Package Version	Filename
Slackware	15.0	i586	nghttp2	1.57.0	nghttp2-1.57.0-i586-1_slack15.0.txz
Slackware	15.0	x86_64	nghttp2	1.57.0	nghttp2-1.57.0-x86_64-1_slack15.0.txz
Slackware	current	i586	nghttp2	1.57.0	nghttp2-1.57.0-i586-1.txz
Slackware	current	x86_64	nghttp2	1.57.0	nghttp2-1.57.0-x86_64-1.txz

11 Oct 2023 06:45Current

9.2High risk

Vulners AI Score9.2

CVSS 3.17.5

EPSS0.99999

SSVC

security fix nghttp2 slackware 15.0 http/2 rapid reset vulnerability cve-2023-44487