FEDORA-2016-ac861a840e — security update for nghttp2

stable

nghttp2-1.7.1-1.fc23

FEDORA-2016-ac861a840e created by kdudka 8 years ago for Fedora 23

CVE-2016-1544: Out of memory in nghttpd, nghttp, and libnghttp2_asio applications due to unlimited incoming HTTP header fields:

https://github.com/tatsuhiro-t/nghttp2/releases/tag/v1.7.1

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-ac861a840e

This update has been submitted for testing by kdudka.

8 years ago

This update has been pushed to testing.

8 years ago

kdudka edited this update.

8 years ago

cserpentis commented & provided feedback 8 years ago

karma

works for me

hreindl commented & provided feedback 8 years ago

karma

works for me

This update has been submitted for stable by bodhi.

8 years ago

besser82 commented & provided feedback 8 years ago

karma

Works great! LGTM =)

kdudka commented & provided feedback 8 years ago

Thanks for feedback!

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

nghttp2-1.7.1-1.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

BZ#1308461 CVE-2016-1544 nghttp2: out of memory error due to unlimited incoming HTTP header fields

BZ#1308467 CVE-2016-1544 nghttp2: out of memory error due to unlimited incoming HTTP header fields [fedora-all]

nghttp2-1.7.1-1.fc23

Automated Test Results

None