Red Hat Security Advisory

RHSA-2024:4252

nghttp2 security update

Released 2024-07-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) libnghttp2-1.33.0-6.el8_10.1, nghttp2-1.33.0-6.el8_10.1
Red Hat Enterprise Linux CRB (v. 8) libnghttp2-devel-1.33.0-6.el8_10.1, nghttp2-1.33.0-6.el8_10.1

TI-2024-18758 CVE-2024-28182

HIGH 71

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.81994 Published 2024-04-04 Partial fix · 1.61.0 CWE-770