nghttp2 1.40.0-1ubuntu0.2 source package in Ubuntu

Changelog

nghttp2 (1.40.0-1ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: HTTP/2 protocol denial of service
    - debian/patches/CVE-2023-44487.patch: implement stream reset rate
      limiting.
    - CVE-2023-44487

 -- Marc Deslauriers <email address hidden>  Wed, 11 Oct 2023 17:39:46 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main misc
Focal security main misc

Downloads

File Size SHA-256 Checksum
nghttp2_1.40.0.orig.tar.bz2 1.8 MiB 82758e13727945f2408d0612762e4655180b039f058d5ff40d055fa1497bd94f
nghttp2_1.40.0-1ubuntu0.2.debian.tar.xz 20.6 KiB 12a47ca5e20a1d1e54fab682b5f9c1c1b1865c372507c0c41595b58eeb1f47fc
nghttp2_1.40.0-1ubuntu0.2.dsc 2.6 KiB 2522b5895ea512bd1deb1c11a2b52566e35db28534395c81aff8e6b7eed1bb7e

View changes file

Binary packages built by this source

libnghttp2-14: library implementing HTTP/2 protocol (shared library)

 This is an implementation of the Hypertext Transfer Protocol version
 2 in C. The framing layer of HTTP/2 is implemented as a reusable C
 library.
 .
 This package installs a shared library.

libnghttp2-14-dbgsym: debug symbols for libnghttp2-14
libnghttp2-dev: library implementing HTTP/2 protocol (development files)

 This is an implementation of the Hypertext Transfer Protocol version
 2 in C. The framing layer of HTTP/2 is implemented as a reusable C
 library.
 .
 This package installs development files.

libnghttp2-doc: library implementing HTTP/2 protocol (documentation)

 This is an implementation of the Hypertext Transfer Protocol version
 2 in C. The framing layer of HTTP/2 is implemented as a reusable C
 library.
 .
 This package installs documentation.

nghttp2: server, proxy and client implementing HTTP/2

 This package will install a set of programs implementing the HTTP/2
 protocol: a standalone server (nghttp2-server), a reverse proxy
 (nghttp2-proxy) and a client (nghttp2-client). It provides no files
 on its own and is not necessary for these programs to work.

nghttp2-client: client implementing HTTP/2 protocol

 This is a command line client implementing the HTTP/2 protocol. It
 gives access to many low-level and advanced aspects of the protocol
 and therefore is useful for debugging.

nghttp2-client-dbgsym: debug symbols for nghttp2-client
nghttp2-proxy: reverse proxy implementing HTTP/2 protocol

 This is a standalone server implementing the HTTP/2 protocol with
 HTTP/1.1 fallback for clients that do not support it. It can be used
 as a frontend in front of web servers that do not support HTTP/2.

nghttp2-proxy-dbgsym: debug symbols for nghttp2-proxy
nghttp2-server: server implementing HTTP/2 protocol

 This is a standalone server implementing the HTTP/2 protocol with
 HTTP/1.1 fallback for clients that do not support it. It can be used
 to serve files from a local directory.

nghttp2-server-dbgsym: debug symbols for nghttp2-server