[CLSA-2023:1697742355] Fix CVE(s): CVE-2023-44487
Type:
security
Severity:
Important
Release date:
2023-10-19 19:05:59 UTC
Description:
* SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: HTTP/2 - per-iteration stream handling limit. - CVE-2023-44487
Updated packages:
  • libnginx-mod-http-auth-pam_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:d7cd05b12b4ae9c191078cdeab14f6f318d1c8d8
  • libnginx-mod-http-cache-purge_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:ff05e6c68acf00061dabbc2a43982aae9ad2cf43
  • libnginx-mod-http-dav-ext_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:8dbef3d9c4cf4864519622d9d31757d2fdc1077b
  • libnginx-mod-http-echo_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:089aebf8f730eb35ea636dcffc07e7fdd0259fa4
  • libnginx-mod-http-fancyindex_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:c98084f9acf0ba1aa55ed6520f6b6738c370f490
  • libnginx-mod-http-geoip_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:0a56ba492fda3e491c2b56169308e23d1dfa228a
  • libnginx-mod-http-headers-more-filter_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:cb452e81cb1ae4027e770418a5c26ed7e4368201
  • libnginx-mod-http-image-filter_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:c4fdbb1934cde69f41bb62630807beffa276dbb3
  • libnginx-mod-http-lua_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:b3681f3a94a84fa56f16829045bf0419dbf5f783
  • libnginx-mod-http-ndk_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:47c7477e71800918379b33e0e812cdbb06b36948
  • libnginx-mod-http-perl_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:6e3484943f202520c51d4f69ae123a35e788f0b7
  • libnginx-mod-http-subs-filter_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:2b95c28fb4fa22cd49b6b60b36fe60815110f607
  • libnginx-mod-http-uploadprogress_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:8e56c74668a8191b54cbca490868def90b78b198
  • libnginx-mod-http-upstream-fair_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:077116221a9043aa0acc9ed87334c48f36d3d5e1
  • libnginx-mod-http-xslt-filter_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:c4c5cdc6652787c83f7296a8612f655765851184
  • libnginx-mod-mail_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:edbf837540cec983e408d10ec0310a9efc1e56be
  • libnginx-mod-nchan_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:8f107bd7910863836358bccf10082f44916327d6
  • libnginx-mod-rtmp_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:85569cb781e1d91a1cd89320b2cff24135fbf2f6
  • libnginx-mod-stream_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:a9deb7af428d23269d3b422d7c9aef59fe5d7afb
  • nginx_1.14.0-0ubuntu1.11+tuxcare.els1_all.deb
    sha:1d5a8d74d3ccba5e0026071398dda5aaa5ef3987
  • nginx-common_1.14.0-0ubuntu1.11+tuxcare.els1_all.deb
    sha:200651ecfa5985f299b51748f3ce54d3b9db660f
  • nginx-core_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:328d0769a859b26c36114db90070a0cfcd72a0a3
  • nginx-doc_1.14.0-0ubuntu1.11+tuxcare.els1_all.deb
    sha:b5a701e88b207e951efa0078124763d955dbc2c5
  • nginx-extras_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:d6315e6355edf2b5d920fb7e8813a7857965769a
  • nginx-full_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:ff11271b90a739d219d4e0309c4257050791711f
  • nginx-light_1.14.0-0ubuntu1.11+tuxcare.els1_amd64.deb
    sha:060830fe32f8e746560d69d50c55ad91ef9076f7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.