Release date:
2026-09-16 13:57:10 UTC
Description:
* SECURITY UPDATE: Memory leak when a HEADERS or PUSH_PROMISE frame cannot be
sent and the stream close callback fails fatally
- debian/patches/CVE-2023-35945.patch: free the outbound item and reset the
active outbound item before returning the fatal error from
nghttp2_session_close_stream in lib/nghttp2_session.c, add regression test
in tests/nghttp2_session_test.c
- CVE-2023-35945
Updated packages:
-
libnghttp2-14_1.43.0-1+deb11u3+tuxcare.els1_amd64.deb
sha:f558839cb8219e867ffc819a65267421f08aaf33
-
libnghttp2-dev_1.43.0-1+deb11u3+tuxcare.els1_amd64.deb
sha:c6cfebc96ec41dded9875dfc95172fb7d70e5f3c
-
libnghttp2-doc_1.43.0-1+deb11u3+tuxcare.els1_all.deb
sha:12c285cb8c8f8aeec0643c3ce61a8358813e9a83
-
nghttp2_1.43.0-1+deb11u3+tuxcare.els1_all.deb
sha:d37fe11e250521dbf62c3797e5e8203e504e312a
-
nghttp2-client_1.43.0-1+deb11u3+tuxcare.els1_amd64.deb
sha:8a188f27ab7c3cb747b0ccfaf1cb697aea051529
-
nghttp2-proxy_1.43.0-1+deb11u3+tuxcare.els1_amd64.deb
sha:c518d6814c45ac231a4423cf67d1699d0b673894
-
nghttp2-server_1.43.0-1+deb11u3+tuxcare.els1_amd64.deb
sha:34d4bf3d1581395d16d017fb95afc6c69f40dbcc
-
libnghttp2-14_1.43.0-1+deb11u3+tuxcare.els1_arm64.deb
sha:d8ca9d00bc8fdaf0fe633aa797359cf7f6f90ee1
-
libnghttp2-dev_1.43.0-1+deb11u3+tuxcare.els1_arm64.deb
sha:5d1cd826c925c22bea5e2b291b34d38c2eb58812
-
nghttp2-client_1.43.0-1+deb11u3+tuxcare.els1_arm64.deb
sha:59cf239bfbe4b6a1ef286334aca4bd3fda41654f
-
nghttp2-proxy_1.43.0-1+deb11u3+tuxcare.els1_arm64.deb
sha:3f5123e8c8faa350e480c5a7d7b8fdd6240bf1dc
-
nghttp2-server_1.43.0-1+deb11u3+tuxcare.els1_arm64.deb
sha:088553cf79637f538b81032e86b671e7ae99a42a
-
libnghttp2-14_1.43.0-1+deb11u3+tuxcare.els1_armel.deb
sha:f7d425ff6c0c6b461beb1107cdc237db5c73f683
-
libnghttp2-dev_1.43.0-1+deb11u3+tuxcare.els1_armel.deb
sha:26894b3b6eaf249c9095e3815b17d4957a28a615
-
nghttp2-client_1.43.0-1+deb11u3+tuxcare.els1_armel.deb
sha:4038095ec4e741970eba9b268ab485aa306e3228
-
nghttp2-proxy_1.43.0-1+deb11u3+tuxcare.els1_armel.deb
sha:ddb86b33c56dffd639cc6eb5fa97bad888571888
-
nghttp2-server_1.43.0-1+deb11u3+tuxcare.els1_armel.deb
sha:297a77f93665d57969c30779d6ae77ee7a291028
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
