1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:4199-1

[SUSE-SU-2023:4199-1] Security update for nghttp2

Severity Important
Affected Packages 6
CVEs 1
Info Packages References Vulnerabilities

Security update for nghttp2

This update for nghttp2 fixes the following issues:

  • CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)
Package Affected Version
pkg:rpm/suse/libnghttp2-14?arch=x86_64&distro=sles-12&sp=5 < 1.39.2-3.13.1
pkg:rpm/suse/libnghttp2-14?arch=s390x&distro=sles-12&sp=5 < 1.39.2-3.13.1
pkg:rpm/suse/libnghttp2-14?arch=ppc64le&distro=sles-12&sp=5 < 1.39.2-3.13.1
pkg:rpm/suse/libnghttp2-14?arch=aarch64&distro=sles-12&sp=5 < 1.39.2-3.13.1
pkg:rpm/suse/libnghttp2-14-32bit?arch=x86_64&distro=sles-12&sp=5 < 1.39.2-3.13.1
pkg:rpm/suse/libnghttp2-14-32bit?arch=s390x&distro=sles-12&sp=5 < 1.39.2-3.13.1
ID
SUSE-SU-2023:4199-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20234199-1/
Published
2023-10-25T10:01:49
(10 months ago)
Modified
2023-10-25T10:01:49
(10 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/libnghttp2-14?arch=x86_64&distro=sles-12&sp=5 suse libnghttp2-14 < 1.39.2-3.13.1 sles-12 x86_64
Affected pkg:rpm/suse/libnghttp2-14?arch=s390x&distro=sles-12&sp=5 suse libnghttp2-14 < 1.39.2-3.13.1 sles-12 s390x
Affected pkg:rpm/suse/libnghttp2-14?arch=ppc64le&distro=sles-12&sp=5 suse libnghttp2-14 < 1.39.2-3.13.1 sles-12 ppc64le
Affected pkg:rpm/suse/libnghttp2-14?arch=aarch64&distro=sles-12&sp=5 suse libnghttp2-14 < 1.39.2-3.13.1 sles-12 aarch64
Affected pkg:rpm/suse/libnghttp2-14-32bit?arch=x86_64&distro=sles-12&sp=5 suse libnghttp2-14-32bit < 1.39.2-3.13.1 sles-12 x86_64
Affected pkg:rpm/suse/libnghttp2-14-32bit?arch=s390x&distro=sles-12&sp=5 suse libnghttp2-14-32bit < 1.39.2-3.13.1 sles-12 s390x
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date