-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Sep 2024 16:25:38 +0300 Source: nghttp2 Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym Architecture: ppc64el Version: 1.52.0-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Adrian Bunk Description: libnghttp2-14 - library implementing HTTP/2 protocol (shared library) libnghttp2-dev - library implementing HTTP/2 protocol (development files) nghttp2-client - client implementing HTTP/2 protocol nghttp2-proxy - reverse proxy implementing HTTP/2 protocol nghttp2-server - server implementing HTTP/2 protocol Closes: 1068415 Changes: nghttp2 (1.52.0-1+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * CVE-2024-28182: unbounded number of HTTP/2 CONTINUATION frames DoS (Closes: #1068415) * nghttp2_option_set_stream_reset_rate_limit was added in 1.52.0-1+deb12u1, add to debian/libnghttp2-14.symbols Checksums-Sha1: e610aaaa223e35d4b55aab8f266ddf21d642d64f 227372 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 85b0e46aed669f8965be01105f676612a883b88a 80656 libnghttp2-14_1.52.0-1+deb12u2_ppc64el.deb c271102d43f5d7c2f433f2ecf7ecf1767274dccc 119840 libnghttp2-dev_1.52.0-1+deb12u2_ppc64el.deb 14da32c115b6321e411c49b2dee31ccb662e7dfc 1914476 nghttp2-client-dbgsym_1.52.0-1+deb12u2_ppc64el.deb a1cb1103de7f36ed8a70c48d25c502ffc8138097 177876 nghttp2-client_1.52.0-1+deb12u2_ppc64el.deb e0478af63ba21966001bef55b12d8ab32a99a26f 5843032 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 48fe3c81fc98436c227e26239263d35a068df788 406100 nghttp2-proxy_1.52.0-1+deb12u2_ppc64el.deb 39ccdce83099058f7d0d0851fe261d7173f4c6dc 963940 nghttp2-server-dbgsym_1.52.0-1+deb12u2_ppc64el.deb bdc8206dd13c8d38f6b73104e51f2be4c5f22086 106544 nghttp2-server_1.52.0-1+deb12u2_ppc64el.deb 8574d009a73e92f36c880a2587db6bc5f1337231 8919 nghttp2_1.52.0-1+deb12u2_ppc64el-buildd.buildinfo Checksums-Sha256: 5bcf3cce143ca656e93276725c05e861a62e046979ebd70c444ea388fff3faee 227372 libnghttp2-14-dbgsym_1.52.0-1+deb12u2_ppc64el.deb d88b09a6a57c57b713ee3fff31bbf8d3ce5f2abd333d777b93b610c32fea7063 80656 libnghttp2-14_1.52.0-1+deb12u2_ppc64el.deb fe9ccb593b16f358d5e75d494f3c16befd47585f7c6c3843a96a34799b82564b 119840 libnghttp2-dev_1.52.0-1+deb12u2_ppc64el.deb 244a68dbc6cbad3c4b5e091deab369c16501c45ee85cf5dbf4c0fa22f444a4bb 1914476 nghttp2-client-dbgsym_1.52.0-1+deb12u2_ppc64el.deb f616857916be4d277e1a13052578d26fc3383a7e05c53041ce3ee0862c23bb91 177876 nghttp2-client_1.52.0-1+deb12u2_ppc64el.deb 92d12024ca71e4fb67c21da804d91b9f4b9539399d0a6d14996fe33212671948 5843032 nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 2899a1501d2e9c4ce01b92c5924c51b14c48bebaef0a4dfc77f144db8a929b2b 406100 nghttp2-proxy_1.52.0-1+deb12u2_ppc64el.deb 9d7da3d40227e9aa8abc367d1a814b019379160d5d35ed07cf84286b5f062772 963940 nghttp2-server-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 70db81117faee716c4241ab432baeba026da6dd18c2b9a934340db85ad4a8d9c 106544 nghttp2-server_1.52.0-1+deb12u2_ppc64el.deb 18e18d88bf6be9b0d3e4a60920c8c1215674bab5d766498b06f77c60cd5da544 8919 nghttp2_1.52.0-1+deb12u2_ppc64el-buildd.buildinfo Files: 13eda2b6c10603f6bb148d93629a762f 227372 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 597197ae055dba820c899f43ec811136 80656 libs optional libnghttp2-14_1.52.0-1+deb12u2_ppc64el.deb 0365cad1dc30084aeb5a652a2b0b2c5b 119840 libdevel optional libnghttp2-dev_1.52.0-1+deb12u2_ppc64el.deb 535faaba33d3e2d99e8777129967e7e5 1914476 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 35f5641c1f30b087029e03de860b501c 177876 httpd optional nghttp2-client_1.52.0-1+deb12u2_ppc64el.deb 86102e991b2e90b48da9620f8bd007a7 5843032 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 00155b21c0ef18781d9fe4d6f52f2d7a 406100 httpd optional nghttp2-proxy_1.52.0-1+deb12u2_ppc64el.deb 8eff3026123affc9f5c76040bdbcaf1d 963940 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u2_ppc64el.deb 0829db92da0c40853f488096b29a62ff 106544 httpd optional nghttp2-server_1.52.0-1+deb12u2_ppc64el.deb 166d90339bb0f90dde9fbe1b51fd041d 8919 httpd optional nghttp2_1.52.0-1+deb12u2_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0YcVZfZCWQv84jpRNcqbeolus3sFAmb5S6cACgkQNcqbeolu s3vzsRAAp6GVLhnpDmuwDaCTBA5uqOBYr4QWG/sQIzvpNcSu8hKW5zP4acW5affZ ZMM6jVhUm1Jmr7Av0BODlqbLrC872xiZ+XyiALJFG/uM1f213bhhdCT3CkKzqeGq Xq7tc5zMhibIBNwA73JDxNmW7XKrgKD1xHROXdel29ZAVnMmrOu9Nn/+rTWK+X9+ KH07SY9eMgsUhddWGsUweEBwhPEPW3lolWjm/wgfPZbS3DDejs+0IavyRzqN+jIi YLbLASdwNZWME6CUCvCH2FztD+QPclacQpJoXL2d/XqxW97ttMO3PinFHJrQAQ75 gXgV3glcwWP15ok/AjFc5LUNF41TgE2d3Fci/EmXJPHc7yB2516V8mBOE8vYrG9V blrxfgm4Xo2gcsHEC4nGUoiza+a8wS8zRmzIWf7shXFIAIHgQ2jTjJMzllww5x/I lRxKWis4pL/tbt2rdogdiHU+cmEG2LU6B2mY6olJgjpepYTQeWKWlLwGb5hEKS2i RI1tXYQK+FDgN4gEbik7904DR4gkUEyAy+yTj2AgPwjeVhLuqyHF49LWHHgctRux cO8W0cISQ2aroSqZsyiNlBpYSmNosru2A9xz7AKFj72yb/0nuO/y/f5ce4R63x2G STibp6XBfgJDna9Z40picjBW1WWWla2T2zmIRxFuSx4xp4mQ1RA= =fbdE -----END PGP SIGNATURE-----