nghttp2 1.55.1-1ubuntu0.2 source package in Ubuntu

Changelog

nghttp2 (1.55.1-1ubuntu0.2) mantic-security; urgency=medium

  * SECURITY UPDATE: HTTP/2 protocol denial of service
    - debian/patches/CVE-2024-28182-1.patch: Add
      nghttp2_option_set_max_continuations
    - debian/patches/CVE-2024-28182-2.patch: Limit CONTINUATION frames
      following an incoming HEADER frame
    - CVE-2024-28182

 -- Fabian Toepfer <email address hidden>  Wed, 17 Apr 2024 16:45:46 +0200

Upload details

Uploaded by:
Fabian Toepfer
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main misc
Mantic security main misc

Downloads

File Size SHA-256 Checksum
nghttp2_1.55.1.orig.tar.gz 1.0 MiB b89dece5bc3382b82c22db8dc8d1e062258cb7af8e4ad55278fa7149645a588d
nghttp2_1.55.1-1ubuntu0.2.debian.tar.xz 18.9 KiB 7bd6ea45f5f1e6e0025df7fbe9276d88295865a322c08beb825ff19331a4a481
nghttp2_1.55.1-1ubuntu0.2.dsc 2.6 KiB e2b3aa919d851887125eb291e13da04a4fe25dceae00ea0ff69ad61f1553962c

View changes file

Binary packages built by this source

libnghttp2-14: library implementing HTTP/2 protocol (shared library)

 This is an implementation of the Hypertext Transfer Protocol version
 2 in C. The framing layer of HTTP/2 is implemented as a reusable C
 library.
 .
 This package installs a shared library.

libnghttp2-14-dbgsym: debug symbols for libnghttp2-14
libnghttp2-dev: library implementing HTTP/2 protocol (development files)

 This is an implementation of the Hypertext Transfer Protocol version
 2 in C. The framing layer of HTTP/2 is implemented as a reusable C
 library.
 .
 This package installs development files.

libnghttp2-doc: library implementing HTTP/2 protocol (documentation)

 This is an implementation of the Hypertext Transfer Protocol version
 2 in C. The framing layer of HTTP/2 is implemented as a reusable C
 library.
 .
 This package installs documentation.

nghttp2: server, proxy and client implementing HTTP/2

 This package will install a set of programs implementing the HTTP/2
 protocol: a standalone server (nghttp2-server), a reverse proxy
 (nghttp2-proxy) and a client (nghttp2-client). It provides no files
 on its own and is not necessary for these programs to work.

nghttp2-client: client implementing HTTP/2 protocol

 This is a command line client implementing the HTTP/2 protocol. It
 gives access to many low-level and advanced aspects of the protocol
 and therefore is useful for debugging.

nghttp2-client-dbgsym: debug symbols for nghttp2-client
nghttp2-proxy: reverse proxy implementing HTTP/2 protocol

 This is a standalone server implementing the HTTP/2 protocol with
 HTTP/1.1 fallback for clients that do not support it. It can be used
 as a frontend in front of web servers that do not support HTTP/2.

nghttp2-proxy-dbgsym: debug symbols for nghttp2-proxy
nghttp2-server: server implementing HTTP/2 protocol

 This is a standalone server implementing the HTTP/2 protocol with
 HTTP/1.1 fallback for clients that do not support it. It can be used
 to serve files from a local directory.

nghttp2-server-dbgsym: debug symbols for nghttp2-server