Oracle alert ELSA-2020-2755 (nghttp2)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2020-2755 Important: Oracle Linux 8 nghttp2 security update | |
| Date: | Fri, 26 Jun 2020 06:30:53 -0700 | |
| Message-ID: | <5895ba94-5c3d-dcc8-e450-88e894958f4b@oracle.com> |
Oracle Linux Security Advisory ELSA-2020-2755 http://linux.oracle.com/errata/ELSA-2020-2755.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: libnghttp2-1.33.0-3.el8_2.1.i686.rpm libnghttp2-1.33.0-3.el8_2.1.x86_64.rpm nghttp2-1.33.0-3.el8_2.1.x86_64.rpm libnghttp2-devel-1.33.0-3.el8_2.1.x86_64.rpm libnghttp2-devel-1.33.0-3.el8_2.1.i686.rpm aarch64: libnghttp2-1.33.0-3.el8_2.1.aarch64.rpm libnghttp2-devel-1.33.0-3.el8_2.1.aarch64.rpm nghttp2-1.33.0-3.el8_2.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/nghttp2-1.33.0-3.... Description of changes: [1.33.0-3.el8_2.1] - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080) [1.33.0-3] - rebuild to trigger gating (#1681044) [1.33.0-2] - backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata