-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Sep 2024 16:25:38 +0300 Source: nghttp2 Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym Architecture: s390x Version: 1.52.0-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Adrian Bunk Description: libnghttp2-14 - library implementing HTTP/2 protocol (shared library) libnghttp2-dev - library implementing HTTP/2 protocol (development files) nghttp2-client - client implementing HTTP/2 protocol nghttp2-proxy - reverse proxy implementing HTTP/2 protocol nghttp2-server - server implementing HTTP/2 protocol Closes: 1068415 Changes: nghttp2 (1.52.0-1+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2024-28182: unbounded number of HTTP/2 CONTINUATION frames DoS (Closes: #1068415) * nghttp2_option_set_stream_reset_rate_limit was added in 1.52.0-1+deb12u1, add to debian/libnghttp2-14.symbols Checksums-Sha1: 8f52a4ee6c0d435440468772b61fb58c50c48077 216496 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_s390x.deb 06a598c959da1a71de8a61a661da6516c99c2f2d 67988 libnghttp2-14_1.52.0-1+deb12u2_s390x.deb e395315044505ad986fc559427e6d0e717d3ba34 105604 libnghttp2-dev_1.52.0-1+deb12u2_s390x.deb 2f8fb78dfa35769703769e687706b172f1000a6d 1874812 nghttp2-client-dbgsym_1.52.0-1+deb12u2_s390x.deb 240723ff191be06b92a488ed123953fb77f1ab0b 159304 nghttp2-client_1.52.0-1+deb12u2_s390x.deb dc0b5c6853f3938061423f7bf22f9a35d5e9f96b 5749348 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_s390x.deb 1bbe572906db28f718f57abd8a942caec7901b4b 355092 nghttp2-proxy_1.52.0-1+deb12u2_s390x.deb 59f01b6ba6cb80abd693c1619fee5cef950d0a80 940740 nghttp2-server-dbgsym_1.52.0-1+deb12u2_s390x.deb 9b9d38322ca9b3ac141e340748cb5ae3a7eca77c 92008 nghttp2-server_1.52.0-1+deb12u2_s390x.deb 1c362e137b73b5795166e51a5e8feeed17067034 8773 nghttp2_1.52.0-1+deb12u2_s390x-buildd.buildinfo Checksums-Sha256: faeabe282e2c99266704849da6121b1db8fcbad73fcdf5f33f62e67461ddd886 216496 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_s390x.deb d206bd2bea47e69c704e83c03fd6974cb702d31885b063a523f9433531d12612 67988 libnghttp2-14_1.52.0-1+deb12u2_s390x.deb e6e15603ce5bbac50e48db6a9484ce53f5e34adeac89468cfe4ba84166003b86 105604 libnghttp2-dev_1.52.0-1+deb12u2_s390x.deb 270ed45ae41227ab0d650fbf2e095092c467f9abf6668b9dd8ab6c5f59aafb59 1874812 nghttp2-client-dbgsym_1.52.0-1+deb12u2_s390x.deb 476b1021052f4b1abe7d85128ed078773254916300f55ac6d8934094246c465d 159304 nghttp2-client_1.52.0-1+deb12u2_s390x.deb 4764f5da170033b3fc7e1c60df0677516968b36c59e515e7d2bdbf6e46dc2605 5749348 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_s390x.deb f344b16349d041bbe39c6462e51f06d53dee1ce45de82c789bac600c011eca82 355092 nghttp2-proxy_1.52.0-1+deb12u2_s390x.deb 5f4632e65eea6a69a5c0901ad588fd985e7d15a9ce3a9d5121fa0301232818ec 940740 nghttp2-server-dbgsym_1.52.0-1+deb12u2_s390x.deb 8ae493b9e8bb2ea588e862452013e25356fb5bb174f4036865f47ce481a7a63a 92008 nghttp2-server_1.52.0-1+deb12u2_s390x.deb 7e6af8cf3668caefecb8dd9d5faca14235ebedd9ae942e14f0f86de3757a853a 8773 nghttp2_1.52.0-1+deb12u2_s390x-buildd.buildinfo Files: abc4ba56130863a8ffedbb223ab0cd33 216496 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u2_s390x.deb b8b87365aaaf9acf404360f0175b36b5 67988 libs optional libnghttp2-14_1.52.0-1+deb12u2_s390x.deb ea5de302e813aa70667f455b639766c2 105604 libdevel optional libnghttp2-dev_1.52.0-1+deb12u2_s390x.deb 757a3a11f48cb1ce9cb89492ce0e6518 1874812 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u2_s390x.deb 4a0764d1e995aa27c97396bae34da866 159304 httpd optional nghttp2-client_1.52.0-1+deb12u2_s390x.deb 6834359dc27a3ad472deadb3dcdd626c 5749348 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_s390x.deb b5591fa0bc3fd86b226bd86fe1b5efff 355092 httpd optional nghttp2-proxy_1.52.0-1+deb12u2_s390x.deb 0659402e17cb2713043f6092d5417c51 940740 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u2_s390x.deb 93d925191f54d99f447e47ef0b1c8436 92008 httpd optional nghttp2-server_1.52.0-1+deb12u2_s390x.deb 294a4eb7329369521f0f20680938601c 8773 httpd optional nghttp2_1.52.0-1+deb12u2_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEctqRAwcjFMIrbct74euoNlQ3ywQFAmb5S6YACgkQ4euoNlQ3 ywRDWRAAonoNk3HIvq+iCeJ4WGJ9OC88CX/KEgmR4alSDmfMWj/tsfgAVZsf4uJS VlELb6V9UIMk+rQYwx0fYDl2ZdgYg8+MkARzbdGWfr6UXywG1ecI2WL7yZT11g5Z ImHEV+X+eTiU1l1IxeOjmzYu5jRaZwsR5eJWOFmW3PW+n5AD+U/HOXB6mb8rOCEV fM3m1A4thIkabqed2XmUnxFlIy3gFAN66J/3kOpKH5RD6E41eP+xFmjNFSHlB82R oSwDxPc54wz++KuM4P9GCv4ecdd/VmXQA9VpOM5onftYDs0ZZnC4r8wJ40xc6DVt 2STXQytyLc5oC/EHxB05MQB/ZxI/UMXBgsEx2ZawYMKSIuF48mIYFrVbkMcr7wkc WFLl+DQIxuGL7XqNWVmuK6zwK8P6KTPgY/bhPL27/mS5wdi6nkzL/2zgRNt05vlO o0dMClAxaYHKSuQar17X3ij+Bo8KVPBWjrmwcC+IpD7ufGudT0UJzWE5OvUDZbQn slFibRIJPemMvbdB+BIWifnD+gEbdc7Tbm2OHn/q3hUHsy4b5QpaDa5RDlzESyku 1YSO50YAv8R7EhSTsM7mwVdf6MFCd3IQjpuvfgDnuV/+qFt4yaSENhCmZARFQ9NR iMjn08cVzjjXVWc+XtX32qatMZnefVqacVeWmy5OE+0vhaq80gg= =Y6rh -----END PGP SIGNATURE-----