Red Hat Security Advisory

RHSA-2024:3501

nghttp2 security update

Released 2024-05-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) libnghttp2-1.43.0-5.el9_4.3, nghttp2-1.43.0-5.el9_4.3
Red Hat Enterprise Linux CRB (v. 9) libnghttp2-devel-1.43.0-5.el9_4.3, nghttp2-1.43.0-5.el9_4.3

TI-2024-18758 CVE-2024-28182

HIGH 71

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.81994 Published 2024-04-04 Partial fix · 1.61.0 CWE-770