1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:4492-1

[SUSE-SU-2023:4492-1] Security update for nghttp2

Severity Important
Affected Packages 17
CVEs 1
Info Packages References Vulnerabilities

Security update for nghttp2

This update for nghttp2 fixes the following issues:

  • CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)
Package Affected Version
pkg:rpm/suse/libnghttp2_asio1?arch=x86_64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio1?arch=s390x&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio1?arch=ppc64le&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio1?arch=aarch64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio-devel?arch=x86_64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio-devel?arch=s390x&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio-devel?arch=ppc64le&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2_asio-devel?arch=aarch64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-devel?arch=x86_64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-devel?arch=s390x&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-devel?arch=ppc64le&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-devel?arch=aarch64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-14?arch=x86_64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-14?arch=s390x&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-14?arch=ppc64le&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-14?arch=aarch64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
pkg:rpm/suse/libnghttp2-14-32bit?arch=x86_64&distro=sles-15&sp=1 < 1.40.0-150000.3.17.1
ID
SUSE-SU-2023:4492-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20234492-1/
Published
2023-11-20T17:59:58
(10 months ago)
Modified
2023-11-20T17:59:58
(10 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/libnghttp2_asio1?arch=x86_64&distro=sles-15&sp=1 suse libnghttp2_asio1 < 1.40.0-150000.3.17.1 sles-15 x86_64
Affected pkg:rpm/suse/libnghttp2_asio1?arch=s390x&distro=sles-15&sp=1 suse libnghttp2_asio1 < 1.40.0-150000.3.17.1 sles-15 s390x
Affected pkg:rpm/suse/libnghttp2_asio1?arch=ppc64le&distro=sles-15&sp=1 suse libnghttp2_asio1 < 1.40.0-150000.3.17.1 sles-15 ppc64le
Affected pkg:rpm/suse/libnghttp2_asio1?arch=aarch64&distro=sles-15&sp=1 suse libnghttp2_asio1 < 1.40.0-150000.3.17.1 sles-15 aarch64
Affected pkg:rpm/suse/libnghttp2_asio-devel?arch=x86_64&distro=sles-15&sp=1 suse libnghttp2_asio-devel < 1.40.0-150000.3.17.1 sles-15 x86_64
Affected pkg:rpm/suse/libnghttp2_asio-devel?arch=s390x&distro=sles-15&sp=1 suse libnghttp2_asio-devel < 1.40.0-150000.3.17.1 sles-15 s390x
Affected pkg:rpm/suse/libnghttp2_asio-devel?arch=ppc64le&distro=sles-15&sp=1 suse libnghttp2_asio-devel < 1.40.0-150000.3.17.1 sles-15 ppc64le
Affected pkg:rpm/suse/libnghttp2_asio-devel?arch=aarch64&distro=sles-15&sp=1 suse libnghttp2_asio-devel < 1.40.0-150000.3.17.1 sles-15 aarch64
Affected pkg:rpm/suse/libnghttp2-devel?arch=x86_64&distro=sles-15&sp=1 suse libnghttp2-devel < 1.40.0-150000.3.17.1 sles-15 x86_64
Affected pkg:rpm/suse/libnghttp2-devel?arch=s390x&distro=sles-15&sp=1 suse libnghttp2-devel < 1.40.0-150000.3.17.1 sles-15 s390x
Affected pkg:rpm/suse/libnghttp2-devel?arch=ppc64le&distro=sles-15&sp=1 suse libnghttp2-devel < 1.40.0-150000.3.17.1 sles-15 ppc64le
Affected pkg:rpm/suse/libnghttp2-devel?arch=aarch64&distro=sles-15&sp=1 suse libnghttp2-devel < 1.40.0-150000.3.17.1 sles-15 aarch64
Affected pkg:rpm/suse/libnghttp2-14?arch=x86_64&distro=sles-15&sp=1 suse libnghttp2-14 < 1.40.0-150000.3.17.1 sles-15 x86_64
Affected pkg:rpm/suse/libnghttp2-14?arch=s390x&distro=sles-15&sp=1 suse libnghttp2-14 < 1.40.0-150000.3.17.1 sles-15 s390x
Affected pkg:rpm/suse/libnghttp2-14?arch=ppc64le&distro=sles-15&sp=1 suse libnghttp2-14 < 1.40.0-150000.3.17.1 sles-15 ppc64le
Affected pkg:rpm/suse/libnghttp2-14?arch=aarch64&distro=sles-15&sp=1 suse libnghttp2-14 < 1.40.0-150000.3.17.1 sles-15 aarch64
Affected pkg:rpm/suse/libnghttp2-14-32bit?arch=x86_64&distro=sles-15&sp=1 suse libnghttp2-14-32bit < 1.40.0-150000.3.17.1 sles-15 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date