-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Sep 2024 16:25:38 +0300 Source: nghttp2 Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym Architecture: armel Version: 1.52.0-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Adrian Bunk Description: libnghttp2-14 - library implementing HTTP/2 protocol (shared library) libnghttp2-dev - library implementing HTTP/2 protocol (development files) nghttp2-client - client implementing HTTP/2 protocol nghttp2-proxy - reverse proxy implementing HTTP/2 protocol nghttp2-server - server implementing HTTP/2 protocol Closes: 1068415 Changes: nghttp2 (1.52.0-1+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2024-28182: unbounded number of HTTP/2 CONTINUATION frames DoS (Closes: #1068415) * nghttp2_option_set_stream_reset_rate_limit was added in 1.52.0-1+deb12u1, add to debian/libnghttp2-14.symbols Checksums-Sha1: 07ba021ad8252e8faabc1346c30e572e00af954d 212672 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_armel.deb 872c5fa4d4a434eaa8502ae3f0b4b0ab0124dcc4 62124 libnghttp2-14_1.52.0-1+deb12u2_armel.deb 9f9f936f1250db013fe9baedce194a0c6858eb56 98628 libnghttp2-dev_1.52.0-1+deb12u2_armel.deb 601bfcc07af856ed748d3a4594bb7d331e76c1f8 1865996 nghttp2-client-dbgsym_1.52.0-1+deb12u2_armel.deb 6f3863aa2c4e2c70da62970c97e1d2ea5e1bd728 149540 nghttp2-client_1.52.0-1+deb12u2_armel.deb ab22880128f5080d67c550962148f00938b7def6 5708284 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_armel.deb 45452b7f1179c6d0946110190fe23d1982d388d5 344712 nghttp2-proxy_1.52.0-1+deb12u2_armel.deb e7690a95150e66d8186c1f964f0856462967cedf 945436 nghttp2-server-dbgsym_1.52.0-1+deb12u2_armel.deb f857b207652dd2a9151e78195af9b032de76a675 85964 nghttp2-server_1.52.0-1+deb12u2_armel.deb 45366003a2ce989fa8471c3c59fa49ca7bbd220d 8748 nghttp2_1.52.0-1+deb12u2_armel-buildd.buildinfo Checksums-Sha256: 50c283f75522aa75c858bb67c43fca7123f70c46c487ac4570a6c464c9651888 212672 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_armel.deb 7716da9c4a11b7d2cf9d50006bf4ec770623e34743cd2a4d339367750a84b176 62124 libnghttp2-14_1.52.0-1+deb12u2_armel.deb ee947558d5526a55fec1630317c668d69b3fccf7e92d7e564395a6d27009d8b2 98628 libnghttp2-dev_1.52.0-1+deb12u2_armel.deb a6cfded65dcfda9b170071a9ab32d27c13d1201ce6d8e7fa7a29d3a782390217 1865996 nghttp2-client-dbgsym_1.52.0-1+deb12u2_armel.deb c154a8810c64bb52ebec94fc9716425b3bf15481b7bd5bfd3de1490206a5f9ab 149540 nghttp2-client_1.52.0-1+deb12u2_armel.deb de9c7662477d44d67d66fbb105c170defe58f812d3d67dc1debde8cbfe664d49 5708284 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_armel.deb e528e211341995ec94b571ffe677ec5f65d18d538f29688291b207b86930003c 344712 nghttp2-proxy_1.52.0-1+deb12u2_armel.deb 4e5d8556ef4d5635079b8b1393e3e22fe636a25387c2d171bd81f6f81a83a241 945436 nghttp2-server-dbgsym_1.52.0-1+deb12u2_armel.deb 6ccc48fd3a60e17acccef2991fd6af3e49c7f9d78ed558707a3a3670133362d7 85964 nghttp2-server_1.52.0-1+deb12u2_armel.deb 7ca5cf91bb4de4ff56cba25986a8020a767a7a6ae78f332b14e745daef4b173f 8748 nghttp2_1.52.0-1+deb12u2_armel-buildd.buildinfo Files: 17ca0a479e8b607ff67080bec6cb0d23 212672 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u2_armel.deb f15ee5d49ef28a02e2d887a06c6edeb4 62124 libs optional libnghttp2-14_1.52.0-1+deb12u2_armel.deb 9f66fd096c1e99fcd3f091219623a3df 98628 libdevel optional libnghttp2-dev_1.52.0-1+deb12u2_armel.deb eaae5cd50581dcfa126cbac174e20b00 1865996 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u2_armel.deb 79f6f19a959feac169e447ad94d2242d 149540 httpd optional nghttp2-client_1.52.0-1+deb12u2_armel.deb 66a981d9c2107f41685ef8439fd0868b 5708284 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_armel.deb c82d121569493ccd9fc2121159cd6471 344712 httpd optional nghttp2-proxy_1.52.0-1+deb12u2_armel.deb 7d6f36046c5f96b7d61916a2088dd79f 945436 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u2_armel.deb 59a1a1ecccc2ec09ebfca231d84db568 85964 httpd optional nghttp2-server_1.52.0-1+deb12u2_armel.deb ba27f67be40124000e7408b4fd5959f6 8748 httpd optional nghttp2_1.52.0-1+deb12u2_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEw2TRpv7HYIvK+TsIbEMdCP/rlD8FAmb5TBYACgkQbEMdCP/r lD9cag//WhRj3qLg4MVhe+Y5N8ixc96xHbsQ6mr723PwKN4My1BX7I7PP3cDaTgy JGO0ZdFFqtZjs/jVfd2QfRaXH/kYSmPMBTlPrtPCGaUPifr85J/EY45ysQHhBbqY LoaljMh+AXyEn7+yGQOvoqdwa0NcQkE0A42KOjZjMbBfwIyKpSWnLgMFm3m6MTpX EgEhXWtW0/KsC7zOL3Zf9To38+tqiLmmvfzHg0nAx+UMQZdatCiYbVU9sxoavixm yUt+++zU0iMopkG2rJj1UHZke/krRvMGonO/4hTZOcP7w1UVPElF1+wvW2dOCs2D FAAUdZv/zcauFar8p0RL/MdqpB2nXqQzUnaLdNupq9yfWkPan+N9H8Rik52Np0QK SaY1IxBF3Mz4n4BzUL0dPktwPP6cC1GczpwDDiGZZHKG2AgGg9XOUmDGCMIlsswQ Ak5+VamUjmwiAOcTcc09ZCDv1GXZmatHpKM8E1kD0xaw9xMggxdEuau2Xd27Fo2y L3c6XXLLoVSWqHhezFnV7drVupOMH+62I/cjjZQenU2P5vku923+IZmRoEfCDb3s t3RsX5AhpDSAdP3zQ0yqtxMB44yxbgiolRqVUmJLlfdLcky67foxOtB3NqtCugQC bUfV+bC3a+uk3eZUeZrM40wcPniE2lyRKLBozjE5QBkgDEyJOAk= =NGiO -----END PGP SIGNATURE-----