-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Sep 2024 16:25:38 +0300 Source: nghttp2 Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym Architecture: armhf Version: 1.52.0-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Adrian Bunk Description: libnghttp2-14 - library implementing HTTP/2 protocol (shared library) libnghttp2-dev - library implementing HTTP/2 protocol (development files) nghttp2-client - client implementing HTTP/2 protocol nghttp2-proxy - reverse proxy implementing HTTP/2 protocol nghttp2-server - server implementing HTTP/2 protocol Closes: 1068415 Changes: nghttp2 (1.52.0-1+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2024-28182: unbounded number of HTTP/2 CONTINUATION frames DoS (Closes: #1068415) * nghttp2_option_set_stream_reset_rate_limit was added in 1.52.0-1+deb12u1, add to debian/libnghttp2-14.symbols Checksums-Sha1: 3b3d8dd9dea3b1b728a4f3dd8b37604d3f44f517 216040 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_armhf.deb 88274c8ef1fd160e7b259c6143f4c3f443a75612 62340 libnghttp2-14_1.52.0-1+deb12u2_armhf.deb a57385a8c8953a49baacc75a0827dbe8b09aa170 99628 libnghttp2-dev_1.52.0-1+deb12u2_armhf.deb 3b84fb3a57bd48a0d735cc64e46800feabf6a081 1873668 nghttp2-client-dbgsym_1.52.0-1+deb12u2_armhf.deb e01029cf649a2dc3df1a1c5312e49508a4fe17de 152220 nghttp2-client_1.52.0-1+deb12u2_armhf.deb 35db8a5df66b2162163c951a8cb3b2d041c186e2 5773784 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_armhf.deb 0840fc7b37a4ca74f550394072d520f5d840e642 352452 nghttp2-proxy_1.52.0-1+deb12u2_armhf.deb 822557484e038c88c2de3a0511f6a3f185ee5ee7 944508 nghttp2-server-dbgsym_1.52.0-1+deb12u2_armhf.deb 23f13b775fe1958b2ca1a2fde324dd52fa658eb0 87084 nghttp2-server_1.52.0-1+deb12u2_armhf.deb 617ee2a8564848ff054bc35fbe532f16087b2c6c 8750 nghttp2_1.52.0-1+deb12u2_armhf-buildd.buildinfo Checksums-Sha256: d927df22f2081aa811ff20e461cca67d6954eb93e715de97679f8514d552f108 216040 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_armhf.deb 4a785df467fce7f046e1ee68d60aab93df1da37c6038197235c710f5f3cf77b9 62340 libnghttp2-14_1.52.0-1+deb12u2_armhf.deb 2a73d9e255c02c87213729d256ff298e98f73af854556d0736e6ae41c0f1cb8d 99628 libnghttp2-dev_1.52.0-1+deb12u2_armhf.deb f0f551961fd28b3c7ceb06e818b625f0bfe1398e60b5d6f936781de330bf3c65 1873668 nghttp2-client-dbgsym_1.52.0-1+deb12u2_armhf.deb 4d04c03fc65ddda0454eaf7d8192efa29519411e419f65552b8cfacc0b55a0e2 152220 nghttp2-client_1.52.0-1+deb12u2_armhf.deb 42c3c4716eb9268d2eee7ebfdc507d29b3a605f35ffb900f861447529e923278 5773784 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_armhf.deb e5c7544c779af5e5b489e199260a5e23ca5c9eac4448c175731849bbee38c1cb 352452 nghttp2-proxy_1.52.0-1+deb12u2_armhf.deb 1faac7608ca8a50c34ba38e8dd94b8c1afdbd056b4535817e5588cc1d542f397 944508 nghttp2-server-dbgsym_1.52.0-1+deb12u2_armhf.deb a4b32df2dc8b1df7bdee7518c4aefbba22a6a392e233a547e2943956f1585544 87084 nghttp2-server_1.52.0-1+deb12u2_armhf.deb 6a983324b8f707f4eab0b9d87a8cc9e348201e615901b6c3205777ccf80a7e22 8750 nghttp2_1.52.0-1+deb12u2_armhf-buildd.buildinfo Files: 0dd683bf9b47a67c6e235bb94c592ce0 216040 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u2_armhf.deb 049c16a7195087f7c8057d3b155c78fa 62340 libs optional libnghttp2-14_1.52.0-1+deb12u2_armhf.deb 7a7ebe1cf0425a31049b22ad8741302b 99628 libdevel optional libnghttp2-dev_1.52.0-1+deb12u2_armhf.deb fccda6730716d391a47de30411264190 1873668 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u2_armhf.deb 7c44e7592481a0af7094f0fed62cad28 152220 httpd optional nghttp2-client_1.52.0-1+deb12u2_armhf.deb 96a846a842212a780af984afe01d1ed0 5773784 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_armhf.deb c6b9e9908cce5e3a2a393b25250114d6 352452 httpd optional nghttp2-proxy_1.52.0-1+deb12u2_armhf.deb b5da62338765f45a01893f4fde1c0cd1 944508 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u2_armhf.deb 469bc71d3c71c724c7b44efb326fe4dd 87084 httpd optional nghttp2-server_1.52.0-1+deb12u2_armhf.deb 671002b806cc01bd72564c20a162be56 8750 httpd optional nghttp2_1.52.0-1+deb12u2_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEw2TRpv7HYIvK+TsIbEMdCP/rlD8FAmb5S6cACgkQbEMdCP/r lD/LaA/+Ke5nfwXPKRw3bXU29gFbJa/e2FXg7qLFDpLDtKiajSKgQcS7c01YLp79 siDscr3KRqtitf5sAjXkeWQaNBao1AuHDQWEaN9/TN6moD6/gH3354PNpi9tVuU6 B42DQRuXAB37mrCBytRQP9/o/7E1lDvj8p840YNGnBCCRIVauYlpXGyrG5cwKOuL o/kSR+8SuwSMvgQS/QDvFS08+Sxu4zUDzY3lWZ+o1y3tKBl8bfhi9AsgEaGzQWaK ujYzlVvVTg5ctYoSHjI5P5ZubCu40P/VHb/0EaTIcNBNAaPKXrRN+q0fB54YWSGH 4YQh1t6rh0YCb7RTDEwatg8iT1KQJCnifLiEFaRVglWnIU/lAdodWq72HB8iZKWl Uy0zPeKIhPAHW6K58F3GQf+Ht3gVtIIqNSVzRwT8s+9+GO8L1dG7zc1GBcXyvqb/ JVO6kH5CA0x7cg3n2MRnukdBW+Z76CF1YuhakbxkuC1YutWYgqELRDEdXhgnTjNi 1/9TMQZu062qirWN1wSz37LxEmeXK69Pn66Y5RAxgMvSGmOw8hoM7qy1qGcEmFHa Wmw4vfjSXxfUg4K7clRSWYCf5ek7Yy2WoVZ3sfAJkSgtFBKAL8R1BGoW8EX3uV9c 2YUnRUnmmsZ/d1XDecYr+Yx5Q7BGrasa4mrJNSiNnGVPj2YGLoo= =oKF3 -----END PGP SIGNATURE-----