Meenali Gupta 85102dd2df nginx: fix CVE-2023-44487 ...

The HTTP/2 protocol allows a denial of service (server resource consumption)
because request cancellation can reset many streams quickly, as exploited in
the wild in August through October 2023.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-44487

Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2024-05-26 15:21:47 -04:00

..

files

nginx: fix CVE-2023-44487

2024-05-26 15:21:47 -04:00

nginx_1.20.1.bb

nginx: Mitigate HTTP/2 Stream Resets Flood impact

2023-12-13 13:35:51 -05:00

nginx_1.21.1.bb

nginx: Mitigate HTTP/2 Stream Resets Flood impact

2023-12-13 13:35:51 -05:00

nginx_1.24.0.bb

nginx: upgrade to 1.24.0 release

2023-11-18 10:03:19 -05:00

nginx.inc

nginx: fix CVE-2023-44487

2024-05-26 15:21:47 -04:00