ELSA-2024-4252

ELSA-2024-4252 - nghttp2 security update

Type:SECURITY
Impact:MODERATE
Release Date:2024-07-02

Description


[1.33.0-6.1]
- fix CONTINUATION frames DoS (CVE-2024-27316)

[1.33.0-6]
- fix CONTINUATION frames DoS (CVE-2024-28182)


Related CVEs


CVE-2024-28182

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nghttp2-1.33.0-6.el8_10.1.src.rpm2e3c18dda06c2aab5b60c44e69981a5bdd8f7621ee283a4c5ad69d362d2cf98a-ol8_aarch64_baseos_latest
nghttp2-1.33.0-6.el8_10.1.src.rpm2e3c18dda06c2aab5b60c44e69981a5bdd8f7621ee283a4c5ad69d362d2cf98a-ol8_aarch64_codeready_builder
nghttp2-1.33.0-6.el8_10.1.src.rpm2e3c18dda06c2aab5b60c44e69981a5bdd8f7621ee283a4c5ad69d362d2cf98a-ol8_aarch64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.1.aarch64.rpm3640cc05bea72601c2d4f37b08ab5b85362aad2fbcba13130413e7b814d7d1aa-ol8_aarch64_baseos_latest
libnghttp2-1.33.0-6.el8_10.1.aarch64.rpm3640cc05bea72601c2d4f37b08ab5b85362aad2fbcba13130413e7b814d7d1aa-ol8_aarch64_u10_baseos_patch
libnghttp2-devel-1.33.0-6.el8_10.1.aarch64.rpmd2a648ef7848d641d652e965da33aea643585bdad9bd3e4c03001c3afa7e4948-ol8_aarch64_codeready_builder
nghttp2-1.33.0-6.el8_10.1.aarch64.rpm6c21e40ffebd65ddc5c17a5bcd6c65c80c7211587faee7e74de19f7bca56ea8b-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) nghttp2-1.33.0-6.el8_10.1.src.rpm2e3c18dda06c2aab5b60c44e69981a5bdd8f7621ee283a4c5ad69d362d2cf98a-ol8_x86_64_baseos_latest
nghttp2-1.33.0-6.el8_10.1.src.rpm2e3c18dda06c2aab5b60c44e69981a5bdd8f7621ee283a4c5ad69d362d2cf98a-ol8_x86_64_codeready_builder
nghttp2-1.33.0-6.el8_10.1.src.rpm2e3c18dda06c2aab5b60c44e69981a5bdd8f7621ee283a4c5ad69d362d2cf98a-ol8_x86_64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.1.i686.rpm9df60275fc8a652d12b0c8d5f118cc361dc1dc3afe5a1ee4b75552c4058d24fe-ol8_x86_64_baseos_latest
libnghttp2-1.33.0-6.el8_10.1.i686.rpm9df60275fc8a652d12b0c8d5f118cc361dc1dc3afe5a1ee4b75552c4058d24fe-ol8_x86_64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.16.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.17.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.18.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.19.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.20.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.21.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.22.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.23.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_23.1.24.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.10.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.2.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.3.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.4.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.5.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.6.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.7.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.8.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_24.1.9.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_25.1.0.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_25.1.1.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_25.1.2.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-exadata_dbserver_25.1.3.0.0_x86_64_base
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-ol8_x86_64_baseos_latest
libnghttp2-1.33.0-6.el8_10.1.x86_64.rpm55d2840a8385e4148784f9367ff32b434dde9617bbd7c2c3a1b18c948687dcc0-ol8_x86_64_u10_baseos_patch
libnghttp2-devel-1.33.0-6.el8_10.1.i686.rpmb9e0e0400a7377e1f87ff01ed1ee4c7321616ee646eb15e650f24aa049eb3b91-ol8_x86_64_codeready_builder
libnghttp2-devel-1.33.0-6.el8_10.1.x86_64.rpmd3ec62dda8b280ed8658d89078532aa900e687f82fb6c2a61e5e9d3a3331b835-ol8_x86_64_codeready_builder
nghttp2-1.33.0-6.el8_10.1.x86_64.rpm5c1dca69575812bb370381c2beb5aeb57acb198aab9406bbca58d33231e51114-ol8_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete