Bug#1082902: bookworm-pu: package nghttp2/1.52.0-1+deb12u2

2024-09-28 Thread Moritz Mühlenhoff
On Sat, Sep 28, 2024 at 02:38:29AM +0300, Adrian Bunk wrote: > Package: release.debian.org > Severity: normal > Tags: bookworm > User: release.debian@packages.debian.org > Usertags: pu > X-Debbugs-Cc: secur...@debian.org, Tomasz Buchert > > * CVE-2024-28182: unbounded number of HTTP/2 CONTI

Bug#1082902: bookworm-pu: package nghttp2/1.52.0-1+deb12u2

2024-09-27 Thread Adrian Bunk
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: secur...@debian.org, Tomasz Buchert * CVE-2024-28182: unbounded number of HTTP/2 CONTINUATION frames DoS (Closes: #1068415) * nghttp2_option_set_stream_reset