DLA-3621-1

NameDLA-3621-1
Descriptionnghttp2 - security update
SourceDebian LTS
ReferencesCVE-2020-11080, CVE-2023-44487

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
nghttp2 (PTS)buster1.36.0-2+deb10u1vulnerable
buster (security)1.36.0-2+deb10u2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
nghttp2sourcebuster1.36.0-2+deb10u2

Search for package or bug name: Reporting problems