Description
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dnsdist | 1.8.2-2 | — |
| Debian 14 | grpc | No fix yet | — |
| Debian 14 | haproxy | 1.8.13-1 | — |
| Debian 14 | jetty9 | 9.4.53-1 | — |
| Debian 14 | netty | 1:4.1.48-8 | — |
| Debian 14 | nghttp2 | 1.57.0-1 | — |
| Debian 14 | nginx | 1.24.0-2 | — |
| Debian 14 | tomcat10 | 10.1.14-1 | — |
| Debian 14 | tomcat9 | 9.0.70-2 | — |
| Debian 14 | twisted | 26.10.0-1 | — |
| Debian 13 | dnsdist | 1.8.2-2 | — |
| Debian 13 | grpc +1 | No fix yet | — |
| Debian 13 | haproxy | 1.8.13-1 | — |
| Debian 13 | jetty9 | 9.4.53-1 | — |
| Debian 13 | netty | 1:4.1.48-8 | — |
| Debian 13 | nghttp2 | 1.57.0-1 | — |
| Debian 13 | nginx | 1.24.0-2 | — |
| Debian 13 | tomcat10 | 10.1.14-1 | — |
| Debian 13 | tomcat9 | 9.0.70-2 | — |
| Debian 13 | varnish | 7.5.0-1 | — |
| Debian 12 | h2o +5 | No fix yet | — |
| Debian 12 | haproxy | 1.8.13-1 | — |
| Debian 12 | jetty9 | 9.4.50-4+deb12u2 | DSA-5540-1 |
| Debian 12 | netty | 1:4.1.48-7+deb12u1 | DSA-5558-1 |
| Debian 12 | nghttp2 | 1.52.0-1+deb12u1 | DSA-5570-1 |
| Debian 12 | tomcat10 | 10.1.6-1+deb12u1 | DSA-5521-1 |
| Debian 12 | tomcat9 | 9.0.70-2 | — |
| Debian 12 | trafficserver | 9.2.3+ds-1+deb12u1 | DSA-5549-1 |
| Debian 11 | jetty9 | 9.4.50-4+deb11u1 | DSA-5540-1 |
| Debian 11 | netty | 1:4.1.48-4+deb11u2 | DSA-5558-1 |
| Debian 11 | nghttp2 | 1.43.0-1+deb11u1 | DSA-5570-1 |
| Debian 11 | tomcat9 | 9.0.43-2~deb11u7 | DSA-5522-1 |
| Debian 11 | trafficserver | 8.1.9+ds-1~deb11u1 | DSA-5549-1 |
| Debian 10 | h2o | 2.2.5+dfsg2-2+deb10u2 | DLA-3638-1 |
| Debian 10 | jetty9 | 9.4.50-4+deb10u1 | DLA-3641-1 |
| Debian 10 | netty | 1:4.1.33-1+deb10u4 | DLA-3656-1 |
| Debian 10 | nghttp2 | 1.36.0-2+deb10u2 | DLA-3621-1 |
| Debian 10 | tomcat9 | 9.0.31-1~deb10u9 | DLA-3617-1 |
| Debian 10 | trafficserver | 8.1.7-0+deb10u3 | DLA-3645-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | dotnet8 | 8.0.100-8.0.0-0ubuntu1 | — |
| Ubuntu 22.04 LTS | dotnet6 | 6.0.123-0ubuntu1~22.04.1 | USN-6427-1 |
| Ubuntu 22.04 LTS | dotnet7 | 7.0.112-0ubuntu1~22.04.1 | USN-6427-1 |
| Ubuntu 22.04 LTS | golang-1.20 | 1.20.3-1ubuntu0.1~22.04.1 | USN-6574-1 |
| Ubuntu 22.04 LTS | golang-1.21 | 1.21.1-1~ubuntu22.04.2 | USN-6574-1 |
| Ubuntu 22.04 LTS | netty | 1:4.1.48-4+deb11u2build0.22.04.1 | USN-6994-1 |
| Ubuntu 22.04 LTS | nghttp2 | 1.43.0-1ubuntu0.1 | USN-6754-1, USN-6505-1 |
| Ubuntu 22.04 LTS | tomcat9 | 9.0.58-1ubuntu0.2 | USN-7410-1 |
| Ubuntu 20.04 LTS | golang-1.20 | 1.20.3-1ubuntu0.1~20.04.1 | USN-6574-1 |
| Ubuntu 20.04 LTS | golang-1.21 | 1.21.1-1~ubuntu20.04.2 | USN-6574-1 |
| Ubuntu 20.04 LTS | nghttp2 | 1.40.0-1ubuntu0.2 | USN-6754-1, USN-6505-1 |
| Ubuntu 20.04 LTS | tomcat9 | 9.0.31-1ubuntu0.9 | USN-7410-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | dnsdist | 1.6.1-1ubuntu0.1~esm1 | — |
| Ubuntu Pro 22.04 LTS | h2o | 2.2.5+dfsg2-6.1ubuntu2+esm1 | USN-7892-1 |
| Ubuntu Pro 22.04 LTS | nodejs | 12.22.9~dfsg-1ubuntu3.6+esm2 | USN-7469-3 |
| Ubuntu Pro 22.04 LTS | trafficserver | 9.1.1+ds-2ubuntu0.1~esm1 | USN-7469-1 |
| Ubuntu Pro 20.04 LTS | h2o | 2.2.5+dfsg2-3ubuntu0.1~esm1 | USN-7892-1 |
| Ubuntu Pro 20.04 LTS | nodejs | 10.19.0~dfsg-3ubuntu1.6+esm2 | USN-7469-3 |
| Ubuntu Pro 20.04 LTS | trafficserver | 8.0.5+ds-3ubuntu0.1~esm1 | USN-7469-1 |
| Ubuntu Pro 18.04 LTS | h2o | 2.2.4+dfsg-1ubuntu0.1~esm2 | USN-7469-4 |
| Ubuntu Pro 18.04 LTS | haproxy | 1.8.8-1ubuntu0.13+esm3 | USN-7067-1 |
| Ubuntu Pro 18.04 LTS | nghttp2 | 1.30.0-1ubuntu1+esm2 | USN-6754-1 |
| Ubuntu Pro 18.04 LTS | nodejs | 8.10.0~dfsg-2ubuntu0.4+esm6 | USN-7469-3 |
| Ubuntu Pro 18.04 LTS | tomcat8 | 8.5.39-1ubuntu1~18.04.3+esm4 | USN-7469-2 |
| Ubuntu Pro 18.04 LTS | tomcat9 | 9.0.16-3ubuntu0.18.04.2+esm5 | USN-7410-1 |
| Ubuntu Pro 16.04 LTS | nghttp2 | 1.7.1-1ubuntu0.1~esm2 | USN-6754-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | tomcat +7 | 1:10.1.36-1.el10_0 | RHSA-2025:7497 |
| RHEL 9 | dotnet-host +6 | 7.0.12-1.el9_2 | RHSA-2023:5749, RHEA-2023:6741 |
| RHEL 9 | dotnet-hostfxr-6.0 +5 | 6.0.23-1.el9_2 | RHSA-2023:5708 |
| RHEL 9 | dotnet-hostfxr-8.0 +5 | 8.0.0~rc.2-0.1.el9_3 | RHEA-2023:6741 |
| RHEL 9 | dotnet6.0 +3 | 6.0.123-1.el9_2 | RHSA-2023:5708 |
| RHEL 9 | dotnet7.0 +4 | 7.0.112-1.el9_2 | RHSA-2023:5749, RHEA-2023:6741 |
| RHEL 9 | dotnet8.0 +3 | 8.0.100~rc.2-0.1.el9_3 | RHEA-2023:6741 |
| RHEL 9 | golang +6 | 1.19.13-1.el9_2 | RHSA-2023:5738 |
| RHEL 9 | grafana | 9.0.9-4.el9_2 | RHSA-2023:5867 |
| RHEL 9 | nghttp2 +2 | 1.43.0-5.el9_2.1 | RHSA-2023:6746, RHSA-2023:5838 |
| RHEL 9 | nginx +9 | 1:1.20.1-14.el9_2.1 | RHSA-2023:6120, RHSA-2023:5711, RHEA-2023:6562 |
| RHEL 9 | nodejs +3 | 1:16.20.2-3.el9_2 | RHSA-2023:5849, RHSA-2023:5765 |
| RHEL 9 | nodejs-devel | 1:18.18.2-2.module+el9.2.0.z+20408+7cb5fda5 | RHSA-2023:5849 |
| RHEL 9 | nodejs-nodemon | 3.0.1-1.module+el9.2.0.z+19753+58118bc0 | RHSA-2023:5849 |
| RHEL 9 | nodejs-packaging +1 | 2021.06-4.module+el9.1.0+15718+e52ec601 | RHSA-2023:5849 |
| RHEL 9 | npm | 1:8.19.4-1.16.20.2.3.el9_2 | RHSA-2023:5849, RHSA-2023:5765 |
| RHEL 9 | tomcat +7 | 1:9.0.62-11.el9_2.3 | RHSA-2023:5929 |
| RHEL 9 | toolbox +1 | 0.0.99.3-10.el9_2 | RHSA-2023:6077 |
| RHEL 9 | varnish +2 | 6.6.2-3.el9_2.1 | RHSA-2023:5924 |
| RHEL 8 | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2023:5721 |
| RHEL 8 | dotnet +5 | 7.0.112-1.el8_8 | RHSA-2023:5709 |
| RHEL 8 | dotnet-host +6 | 7.0.12-1.el8_8 | RHSA-2023:5709 |
| RHEL 8 | dotnet-hostfxr-6.0 +5 | 6.0.23-1.el8_8 | RHSA-2023:5710 |
| RHEL 8 | dotnet6.0 +3 | 6.0.123-1.el8_8 | RHSA-2023:5710 |
| RHEL 8 | go-toolset | 1.19.13-1.module+el8.8.0+20380+7171fefb | RHSA-2023:5721 |
| RHEL 8 | golang +6 | 1.19.13-1.module+el8.8.0+20373+d9cd605c | RHSA-2023:5721 |
| RHEL 8 | grafana | 7.5.15-5.el8_8 | RHSA-2023:5863 |
| RHEL 8 | nghttp2 +2 | 1.33.0-5.el8_8 | RHSA-2023:5837 |
| RHEL 8 | nginx +8 | 1:1.20.1-1.module+el8.8.0+20359+9bd89172.1 | RHSA-2023:5713, RHSA-2023:5712 |
| RHEL 8 | nodejs +3 | 1:16.20.2-3.module+el8.8.0+20386+0b1f3093 | RHSA-2024:1444, RHSA-2023:7205, RHSA-2023:5869 |
| RHEL 8 | nodejs-nodemon | 3.0.1-1.module+el8.8.0+19757+8ca87034 | RHSA-2024:1444, RHSA-2023:7205, RHSA-2023:5869 |
| RHEL 8 | nodejs-packaging | 26-1.module+el8.8.0+19857+6d2a104d | RHSA-2024:1444, RHSA-2023:7205, RHSA-2023:5869 |
| RHEL 8 | nodejs-packaging-bundler | 2021.06-4.module+el8.7.0+15582+19c314fa | RHSA-2023:7205, RHSA-2023:5869 |
| RHEL 8 | npm | 1:8.19.4-1.16.20.2.3.module+el8.8.0+20386+0b1f3093 | RHSA-2024:1444, RHSA-2023:7205, RHSA-2023:5869 |
| RHEL 8 | tomcat +7 | 1:9.0.62-5.el8_8.2 | RHSA-2023:5928 |
| RHEL 8 | varnish +2 | 6.0.8-3.module+el8.8.0+20455+bdc2c048.1 | RHSA-2023:5989 |
| RHEL 8 | varnish-modules | 0.15.0-6.module+el8.5.0+11976+0b4af72d | RHSA-2023:5989 |
| RHEL 7 | rhc-worker-script | 0.5-1.el7_9 | RHSA-2023:5835 |
| RHEL 3 | httpd24-nghttp2 +2 | 1.7.1-11.el7 | RHSA-2023:5841 |
| RHEL 3 | rh-nginx120-nginx +5 | 1:1.20.1-1.el7.1 | RHSA-2023:5720 |
| RHEL 3 | rh-nodejs14-nodejs +3 | 14.21.3-5.el7 | RHSA-2023:5840 |
| RHEL 3 | rh-nodejs14-npm | 6.14.18-14.21.3.5.el7 | RHSA-2023:5840 |
| RHEL 3 | rh-varnish6-varnish +3 | 6.0.8-2.el7.3 | RHSA-2023:7334 |
Show 34 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Service Interconnect 1 | skupper-cli | 1.4.3-4.el8 | RHSA-2023:6165 |
| Red Hat Service Interconnect 1 | skupper-router +3 | 2.4.3-1.el8 | RHSA-2023:6165 |
| Red Hat Serverless 1 | openshift-serverless-clients | 1.9.2-4.el8 | RHSA-2023:6298 |
| Red Hat Satellite Utils 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite Capsule 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite Capsule 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | foreman +13 | 3.1.1.27-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | foreman-redis | 3.7.0.9-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | puppet-agent | 7.26.0-3.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | puppetserver | 7.11.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-django +1 | 3.2.21-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite 6 | python-future +1 | 0.18.3-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-gitpython +1 | 3.1.32-1.el8pc | RHSA-2023:6818, RHSA-2023:5931 |
| Red Hat Satellite 6 | python-pulp-ansible +1 | 1:0.16.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-requests +1 | 2.31.0-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | python-sqlparse +1 | 0.4.4-1.el8pc | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-actionpack +2 | 6.1.7.3-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-git | 1.18.0-0.1.el8sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Satellite 6 | rubygem-globalid | 1.1.0-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-kubeclient | 4.10.1-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-rack | 2.2.7-1.el8sat | RHSA-2023:6818 |
| Red Hat Satellite 6 | rubygem-safemode | 1.3.8-1.el8sat | RHSA-2023:5979 |
| Red Hat Satellite 6 | tfm-rubygem-git | 1.18.0-0.1.el7sat | RHSA-2023:5980 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.0.3-1.el7sat | RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979 |
| Red Hat Rhel Satellite Client 6 | foreman_ygg_worker | 0.2.2-1.el7sat | RHSA-2023:5982 |
| Red Hat Rhel Satellite Client 6 | puppet-agent | 7.26.0-3.el6sat | RHSA-2023:5982 |
| Red Hat Rhel Satellite Client 6 | yggdrasil | 0.2.3-1.el7sat | RHSA-2023:5982 |
| Red Hat Rhel Dotnet 6 | rh-dotnet60-dotnet +4 | 6.0.123-1.el7_9 | RHSA-2023:5705 |
| Red Hat Rhel Dotnet 6 | rh-dotnet60-dotnet-host +6 | 6.0.23-1.el7_9 | RHSA-2023:5705 |
| Red Hat Single Sign On 7 | rh-sso7-keycloak +1 | 18.0.11-2.redhat_00001.1.el7sso | RHSA-2023:7484, RHSA-2023:7483, RHSA-2023:7482 |
| RHEL 9.0 EUS | dotnet-host +6 | 6.0.23-1.el9_0 | RHSA-2023:5706 |
| RHEL 9.0 EUS | dotnet6.0 +4 | 6.0.123-1.el9_0 | RHSA-2023:5706 |
| RHEL 9.0 EUS | grafana | 7.5.11-6.el9_0 | RHSA-2023:5866 |
| RHEL 9.0 EUS | nghttp2 +2 | 1.43.0-5.el9_0.2 | RHSA-2023:5770 |
| RHEL 9.0 EUS | nginx +8 | 1:1.20.1-10.el9_0.1 | RHSA-2023:5714 |
| RHEL 9.0 EUS | nodejs +3 | 1:16.20.2-3.el9_0 | RHSA-2023:5764 |
| RHEL 9.0 EUS | npm | 1:8.19.4-1.16.20.2.3.el9_0 | RHSA-2023:5764 |
| RHEL 9.0 EUS | toolbox +1 | 0.0.99.3-4.el9_0 | RHSA-2023:6057 |
| RHEL 9.0 EUS | varnish +2 | 6.6.2-2.el9_0.2 | RHSA-2023:5930 |
| RHEL 8.6 EUS | dotnet +5 | 6.0.123-1.el8_6 | RHSA-2023:5707 |
| RHEL 8.6 EUS | dotnet-host +6 | 6.0.23-1.el8_6 | RHSA-2023:5707 |
| RHEL 8.6 EUS | grafana | 7.5.11-4.el8_6 | RHSA-2023:5864 |
| RHEL 8.6 EUS | nghttp2 +2 | 1.33.0-4.el8_6.1 | RHSA-2023:5769 |
| RHEL 8.6 EUS | nginx +8 | 1:1.20.1-1.module+el8.6.0+20350+58c16214.1 | RHSA-2023:5715 |
| RHEL 8.6 EUS | nodejs +3 | 1:16.20.2-3.module+el8.6.0+20387+28a0198c | RHSA-2023:5803 |
| RHEL 8.6 EUS | nodejs-nodemon | 3.0.1-1.module+el8.6.0+19765+366b9144 | RHSA-2023:5803 |
| RHEL 8.6 EUS | nodejs-packaging | 26-1.module+el8.6.0+19856+c0c87259 | RHSA-2023:5803 |
| RHEL 8.6 EUS | npm | 1:8.19.4-1.16.20.2.3.module+el8.6.0+20387+28a0198c | RHSA-2023:5803 |
| RHEL 8.6 EUS | varnish +2 | 6.0.8-2.module+el8.6.0+20465+cbb0694f.2 | RHSA-2023:6020 |
| RHEL 8.6 EUS | varnish-modules | 0.15.0-6.module+el8.5.0+11976+0b4af72d | RHSA-2023:6020 |
| RHEL 8.4 TUS | grafana | 7.3.6-6.el8_4 | RHSA-2023:5865 |
| RHEL 8.4 TUS | nghttp2 +1 | 1.33.0-4.el8_4.1 | RHSA-2023:5768 |
| RHEL 8.4 TUS | varnish +2 | 6.0.6-2.module+el8.4.0+20467+7fe641ed.4 | RHSA-2023:6021 |
| RHEL 8.4 TUS | varnish-modules | 0.15.0-5.module+el8.3.0+6843+b3b42fcc | RHSA-2023:6021 |
| RHEL 8.4 E4S | grafana | 7.3.6-6.el8_4 | RHSA-2023:5865 |
| RHEL 8.4 E4S | nghttp2 +1 | 1.33.0-4.el8_4.1 | RHSA-2023:5768 |
| RHEL 8.4 E4S | varnish +2 | 6.0.6-2.module+el8.4.0+20467+7fe641ed.4 | RHSA-2023:6021 |
| RHEL 8.4 E4S | varnish-modules | 0.15.0-5.module+el8.3.0+6843+b3b42fcc | RHSA-2023:6021 |
| RHEL 8.4 AUS | grafana | 7.3.6-6.el8_4 | RHSA-2023:5865 |
| RHEL 8.4 AUS | nghttp2 +1 | 1.33.0-4.el8_4.1 | RHSA-2023:5768 |
| RHEL 8.4 AUS | varnish +2 | 6.0.6-2.module+el8.4.0+20467+7fe641ed.4 | RHSA-2023:6021 |
| RHEL 8.4 AUS | varnish-modules | 0.15.0-5.module+el8.3.0+6843+b3b42fcc | RHSA-2023:6021 |
| RHEL 8.2 TUS | nghttp2 +1 | 1.33.0-3.el8_2.2 | RHSA-2023:5767 |
| RHEL 8.2 TUS | varnish +2 | 6.0.2-2.module+el8.2.0+20470+5fdd0c40.3 | RHSA-2023:6022 |
| RHEL 8.2 TUS | varnish-modules | 0.15.0-4.module+el8+2481+4078e9d2 | RHSA-2023:6022 |
| RHEL 8.2 E4S | nghttp2 +1 | 1.33.0-3.el8_2.2 | RHSA-2023:5767 |
| RHEL 8.2 E4S | varnish +2 | 6.0.2-2.module+el8.2.0+20470+5fdd0c40.3 | RHSA-2023:6022 |
| RHEL 8.2 E4S | varnish-modules | 0.15.0-4.module+el8+2481+4078e9d2 | RHSA-2023:6022 |
| RHEL 8.2 AUS | nghttp2 +1 | 1.33.0-3.el8_2.2 | RHSA-2023:5767 |
| RHEL 8.2 AUS | varnish +2 | 6.0.2-2.module+el8.2.0+20470+5fdd0c40.3 | RHSA-2023:6022 |
| RHEL 8.2 AUS | varnish-modules | 0.15.0-4.module+el8+2481+4078e9d2 | RHSA-2023:6022 |
| RHEL 8.1 E4S | nghttp2 +1 | 1.33.0-3.el8_1.2 | RHSA-2023:5766 |
| RHEL 8.1 E4S | varnish +2 | 6.0.2-2.module+el8.1.0+20476+646a44ec.3 | RHSA-2023:6023 |
| RHEL 8.1 E4S | varnish-modules | 0.15.0-4.module+el8+2481+4078e9d2 | RHSA-2023:6023 |
| Red Hat Openshift Pipelines 1 | openshift-pipelines-client | 1.10.6-11031.el8 | RHSA-2023:7699, RHSA-2023:6781, RHSA-2023:6059 |
| Red Hat Openshift Pipelines 1 | openshift-pipelines-client-redistributable | 1.11.2-11148.el8 | RHSA-2023:6781, RHSA-2023:6059 |
| Red Hat Openshift Ironic 4 | openstack-ironic +5 | 1:21.3.1-0.20231106145533.e53dc4f.el9 | RHSA-2023:7325, RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | openstack-ironic-inspector +4 | 11.5.0-0.20230706175125.193aa0d.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-automaton +1 | 3.1.0-0.20230608140652.a4f7631.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-cinderclient +1 | 9.3.0-0.20230608143053.f7a612e.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-cliff +2 | 4.3.0-0.20230608150702.72e81d7.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-debtcollector +1 | 2.5.0-0.20230308172820.a6b46c5.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-decorator +1 | 4.4.2-6.0.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-dracclient +1 | 8.0.0-0.20230308200614.9c7499c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-fixtures +1 | 4.0.1-1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-futurist +1 | 2.4.1-0.20230308173923.159d752.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-glanceclient +1 | 1:4.3.0-0.20230608143056.52fb6b2.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-hardware +2 | 0.30.0-0.20230308190813.f6ff0ed.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-ironic-lib +1 | 5.4.1-0.20230706172632.25d8671.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-ironic-prometheus-exporter +1 | 4.1.1-0.20230614150617.7b35627.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-keystoneauth1 +1 | 5.2.0-0.20230608152518.2e40bbf.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-keystoneclient +2 | 1:5.1.0-0.20230608141554.4763cd8.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-keystonemiddleware +1 | 10.3.0-0.20230608151410.92cdf8a.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-openstacksdk +2 | 1.2.0-0.20230608155226.b7ff031.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-os-service-types +1 | 1.7.0-0.20230308170555.0b2f473.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-os-traits +2 | 3.0.0-0.20230608152745.cff125c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-osc-lib +2 | 2.8.0-0.20230608151456.db9cdc9.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-cache +3 | 3.4.0-0.20230608153448.a720016.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-concurrency +3 | 5.1.1-0.20230706190204.0af5942.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-config +1 | 2:9.1.1-0.20230608145954.515daab.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-context +2 | 5.1.1-0.20230608143931.7696282.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-db +3 | 12.3.1-0.20230608142355.b689b63.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-i18n +2 | 6.0.0-0.20230608140652.03605c2.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-log +3 | 5.2.0-0.20230608150750.16a8a42.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-messaging +2 | 14.3.1-0.20230608152013.0602d1a.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-middleware +3 | 5.1.1-0.20230608145931.7725ac9.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-policy +3 | 4.2.0-0.20230608153320.93129eb.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-rootwrap +2 | 7.0.1-0.20230608144658.b72372b.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-serialization +2 | 5.1.1-0.20230608144505.b4be3a4.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-service +2 | 3.1.1-0.20230608145222.b3ba591.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-upgradecheck +1 | 2.1.1-0.20230608143829.eeedfc9.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-utils +1 | 6.1.0-0.20230608142355.d49d594.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-versionedobjects +1 | 3.1.0-0.20230608141554.b4ea834.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-osprofiler | 3.4.3-0.20230308173821.3286301.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-pbr | 5.11.1-0.1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-proliantutils | 2.14.1-0.20230608154738.3de2844.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-pycadf +1 | 3.1.1-0.20230308171749.4179996.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-requestsexceptions | 1.4.0-0.20230308170555.d7ac0ff.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-scciclient | 0.12.3-0.20230308201513.0940a71.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-stevedore | 5.1.0-0.20230608154210.2d99ccc.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-sushy | 4.5.0-0.20230719180619.146ed33.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-sushy-oem-idrac | 5.0.0-0.20230308202122.da9a0e4.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-swiftclient | 4.3.0-0.20230608151934.236c277.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-tenacity | 6.3.1-1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-tooz | 4.1.0-0.20230608154038.d5bf20c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-werkzeug +1 | 2.0.3-5.el9 | RHSA-2023:7610 |
| Red Hat Openshift Ironic 4 | python-wrapt +1 | 1.14.1-1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python3-ironic-python-agent +2 | 9.5.0-0.20230728140546.fce0b8c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Gitops 1 | openshift-gitops-kam +1 | 1.8.6-10.el8 | RHSA-2023:7344, RHSA-2023:6782 |
| Red Hat OpenStack 17 | collectd-libpod-stats | 1.0.5-6.el8ost | RHSA-2023:5970, RHSA-2023:5969 |
| Red Hat OpenStack 17 | etcd | 3.4.26-3.el9ost | RHSA-2023:5969 |
| Red Hat OpenStack 17 | python-octavia-tests-tempest +2 | 1.9.0-1.20230509101018.el9ost | RHSA-2023:5969 |
| Red Hat OpenStack 16 | collectd-libpod-stats | 1.0.4-5.el8ost | RHSA-2023:5967, RHSA-2023:5964 |
| Red Hat OpenStack 16 | etcd | 3.3.23-15.el8ost | RHSA-2023:5967, RHSA-2023:5965 |
| Red Hat OpenStack 16 | python-octavia-tests-tempest +2 | 1.3.0-1.20210528004838.0ae7f10.el8ost | RHSA-2023:5967, RHSA-2023:5965 |
| Red Hat OpenShift 4 | afterburn +2 | 5.4.3-1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | buildah +1 | 1:1.29.1-10.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | butane +1 | 0.19.0-1.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | catch +1 | 3.3.2-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | conmon | 3:2.1.7-3.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | container-selinux | 3:2.221.0-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1.0.1-11.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | containers-common | 2:1-51.rhaos4.14.el8 | RHSA-2023:5675, RHSA-2023:5009 |
| Red Hat OpenShift 4 | coreos-installer +2 | 0.17.0-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | cri-o | 1.24.6-6.1.rhaos4.11.git7f73171.el8_6 | RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7325 |
| Red Hat OpenShift 4 | cri-tools | 1.27.0-2.1.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | crun | 1.9.2-1.rhaos4.13.el8 | RHSA-2023:5675, RHSA-2023:5009 |
| Red Hat OpenShift 4 | crun-wasm | 0.0-3.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | fmt +1 | 9.1.0-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | gmock +3 | 1.13.0-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | google-benchmark +2 | 1.8.2-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | haproxy +1 | 2.6.13-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | ignition +1 | 2.16.2-1.1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | kata-containers | 3.1.3-4.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | kernel-rt +15 | 4.18.0-372.82.1.rt7.241.el8_6 | RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7325 |
| Red Hat OpenShift 4 | kernel-rt-modules-core +5 | 5.14.0-284.36.1.rt14.321.el9_2 | RHSA-2023:7325, RHSA-2023:5675, RHSA-2023:5009 |
| Red Hat OpenShift 4 | microshift +4 | 4.14.2-202311091609.p0.gd80d6de.assembly.4.14.2.el9 | RHSA-2023:6839 |
| Red Hat OpenShift 4 | nmstate +4 | 2.2.12-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift +1 | 4.11.0-202310140343.p0.gec2a592.assembly.stream.el8 | RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:5717 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8 | RHSA-2023:5675, RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8 | RHSA-2023:7610, RHSA-2023:7325, RHSA-2023:6840 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift-prometheus-promu +1 | 0.15.0-15.1.gitd5383c5.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift4-aws-iso | 4.14.0-202309272140.p0.gd2acdd5.assembly.stream.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | ovn23.09 +3 | 23.09.0-37.el9fdp | RHSA-2023:5009 |
| Red Hat OpenShift 4 | perf +30 | 4.18.0-372.82.1.el8_6 | RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7325 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-10.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | rtla +30 | 5.14.0-284.36.1.el9_2 | RHSA-2023:7325, RHSA-2023:5675, RHSA-2023:5009 |
| Red Hat OpenShift 4 | runc | 4:1.1.9-1.rhaos4.13.el8 | RHSA-2023:5675, RHSA-2023:5009 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.2-10.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | spdlog +1 | 1.12.0-1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | toolbox | 0.1.2-1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | wasmedge +2 | 0.12.1-2.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat Ocp Tools 4 | helm | 3.13.2-35.el9 | RHEA-2024:1870 |
| Red Hat Ocp Tools 4 | jenkins | 2.414.3.1698292201-3.el8 | RHSA-2024:0777, RHSA-2023:7288, RHSA-2023:6179 |
| Red Hat Ocp Tools 4 | jenkins-2-plugins | 4.13.1698292274-1.el8 | RHSA-2024:0777, RHSA-2023:7288, RHSA-2023:6179 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-apache-commons-beanutils | 1.11.0-1.redhat_00001.1.ep7.el7 | RHSA-2025:16668 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-hibernate-validator +1 | 5.3.6-1.SP1_redhat_00001.1.ep7.el7 | RHSA-2025:16668 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-hornetq +3 | 2.4.11-1.Final_redhat_00001.1.ep7.el7 | RHSA-2025:16668 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-undertow | 1.4.18-17.SP15_redhat_00001.1.ep7.el7 | RHSA-2025:16668 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly +1 | 7.1.12-2.GA_redhat_00002.1.ep7.el7 | RHSA-2025:16668 |
| Red Hat JBoss Web Server 5 | jws5-tomcat +11 | 9.0.62-16.redhat_00014.1.el7jws | RHSA-2023:5783 |
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 2.16.0-17.redhat_00051.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-apache-sshd | 2.9.3-1.redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-avro | 1.11.3-1.redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-guava +1 | 32.1.1-2.jre_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.3.20-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.32-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-infinispan +9 | 11.0.18-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jandex | 2.4.4-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsp-api_2.3_spec | 2.0.1-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jboss-marshalling +1 | 2.0.14-1.SP1_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +2 | 1.10.0-33.Final_redhat_00032.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jboss-xnio-base | 3.8.11-1.SP1_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jbossws-cxf | 5.4.9-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-jgroups | 4.2.23-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-netty +28 | 4.1.94-2.Final_redhat_00003.1.el7eap | RHSA-2023:5920 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.2.26-2.SP2_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-weld-ejb +6 | 3.1.10-2.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-wildfly +3 | 7.4.13-10.GA_redhat_00002.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk17 | 7.4.13-10.GA_redhat_00002.1.el8eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:5920 |
| Red Hat JBoss EAP 7 | eap7-wildfly-javadocs | 7.4.14-5.GA_redhat_00002.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-wildfly-transaction-client | 1.1.16-1.Final_redhat_00001.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss EAP 7 | eap7-yasson | 1.0.11-4.redhat_00002.1.el7eap | RHSA-2023:7639, RHSA-2023:7638, RHSA-2023:7637 |
| Red Hat JBoss Core Services 1 | jbcs-httpd24-nghttp2 +1 | 1.43.0-12.el7jbcs | RHSA-2023:6105 |
| Red Hat Devtools 2023 | go-toolset-1.19 +3 | 1.19.13-1.el7_9 | RHSA-2023:5719 |
| Red Hat Devtools 2023 | go-toolset-1.19-golang +6 | 1.19.13-2.el7_9 | RHSA-2023:5719 |
| Red Hat Container Native Virtualization 4 | kubevirt +2 | 4.13.6-1596.el7 | RHSA-2023:7521 |
| Red Hat Ceph Storage 5 | ceph +43 | 2:16.2.10-266.el8cp | RHSA-2024:4118 |
| Red Hat Ceph Storage 5 | ceph-ansible | 6.0.28.8-1.el8cp | RHSA-2024:4118 |
| Red Hat Ansible Automation Platform Inside 2 | receptor +1 | 1.4.2-1.el8ap | RHSA-2023:5805 |
| Red Hat Ansible Automation Platform Developer 2 | receptor +1 | 1.4.2-1.el8ap | RHSA-2023:5805 |
| Red Hat Ansible Automation Platform 2 | receptor +1 | 1.4.2-1.el8ap | RHSA-2023:5805 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | dotnet-host +6 | 7.0.12-1.el9_2 | ALSA-2023:5749 |
| AlmaLinux 9 | dotnet-hostfxr-6.0 +5 | 6.0.23-1.el9_2 | ALSA-2023:5708 |
| AlmaLinux 9 | dotnet-sdk-6.0 +2 | 6.0.123-1.el9_2 | ALSA-2023:5708 |
| AlmaLinux 9 | dotnet-sdk-7.0 +3 | 7.0.112-1.el9_2 | ALSA-2023:5749 |
| AlmaLinux 9 | golang +7 | 1.19.13-1.el9_2 | ALSA-2023:5738 |
| AlmaLinux 9 | grafana | 9.0.9-4.el9_2.alma.1 | ALSA-2023:5867 |
| AlmaLinux 9 | mod_http2 | 2.0.26-1.el9 | ALSA-2024:2368 |
| AlmaLinux 9 | nghttp2 +2 | 1.43.0-5.el9_2.1 | ALSA-2023:6746, ALSA-2023:5838 |
| AlmaLinux 9 | nginx +9 | 1:1.20.1-14.el9_2.1.alma.1 | ALSA-2023:6120, ALSA-2023:5711 |
| AlmaLinux 9 | nodejs +3 | 1:16.20.2-3.el9_2 | ALSA-2023:5849, ALSA-2023:5765 |
| AlmaLinux 9 | nodejs-devel | 1:18.18.2-2.module_el9.2.0+43+3ebc9e20 | ALSA-2023:5849 |
| AlmaLinux 9 | nodejs-nodemon | 3.0.1-1.module_el9.2.0+36+853e48f5 | ALSA-2023:5849 |
| AlmaLinux 9 | nodejs-packaging +1 | 2021.06-4.module_el9.1.0+13+d9a595ea | ALSA-2023:5849 |
| AlmaLinux 9 | npm | 1:8.19.4-1.16.20.2.3.el9_2 | ALSA-2023:5849, ALSA-2023:5765 |
| AlmaLinux 9 | tomcat +7 | 1:9.0.62-11.el9_2.3 | ALSA-2023:5929 |
| AlmaLinux 9 | toolbox +1 | 0.0.99.3-10.el9_2 | ALSA-2023:6077 |
| AlmaLinux 9 | varnish +2 | 6.6.2-3.el9_2.1 | ALSA-2023:5924 |
| AlmaLinux 8 | delve | 1.9.1-1.module_el8.8.0+3471+a62632a0 | ALSA-2023:5721 |
| AlmaLinux 8 | dotnet +4 | 7.0.112-1.el8_8 | ALSA-2023:5709 |
| AlmaLinux 8 | dotnet-host +6 | 7.0.12-1.el8_8 | ALSA-2023:5709 |
| AlmaLinux 8 | dotnet-hostfxr-6.0 +5 | 6.0.23-1.el8_8 | ALSA-2023:5710 |
| AlmaLinux 8 | dotnet-sdk-6.0 +2 | 6.0.123-1.el8_8 | ALSA-2023:5710 |
| AlmaLinux 8 | golang +7 | 1.19.13-1.module_el8.8.0+3625+a06035cf | ALSA-2023:5721 |
| AlmaLinux 8 | grafana | 7.5.15-5.el8_8.alma.1 | ALSA-2023:5863 |
| AlmaLinux 8 | httpd +6 | 2.4.37-64.module_el8.10.0+3761+75f8c656 | ALSA-2024:3121 |
| AlmaLinux 8 | mod_http2 | 1.15.7-10.module_el8.10.0+3832+564e7653 | ALSA-2024:3121 |
| AlmaLinux 8 | mod_md | 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa | ALSA-2024:3121 |
| AlmaLinux 8 | mod_ssl +1 | 1:2.4.37-64.module_el8.10.0+3761+75f8c656 | ALSA-2024:3121 |
| AlmaLinux 8 | nghttp2 +2 | 1.33.0-5.el8_8 | ALSA-2023:5837 |
| AlmaLinux 8 | nginx +8 | 1:1.20.1-1.module_el8.8.0+3624+abf02be4.1.alma.1 | ALSA-2023:5713, ALSA-2023:5712 |
| AlmaLinux 8 | nodejs +3 | 1:16.20.2-3.module_el8.8.0+3653+c77a731f | ALSA-2024:1444, ALSA-2023:7205, ALSA-2023:5869 |
| AlmaLinux 8 | nodejs-nodemon | 3.0.1-1.module_el8.8.0+3613+1ed8c91d | ALSA-2024:1444, ALSA-2023:7205, ALSA-2023:5869 |
| AlmaLinux 8 | nodejs-packaging | 26-1.module_el8.8.0+3614+204d6f43 | ALSA-2024:1444, ALSA-2023:7205, ALSA-2023:5869 |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-4.module_el8.7.0+3343+ea2b7901 | ALSA-2023:7205, ALSA-2023:5869 |
| AlmaLinux 8 | npm | 1:8.19.4-1.16.20.2.3.module_el8.8.0+3653+c77a731f | ALSA-2024:1444, ALSA-2023:7205, ALSA-2023:5869 |
| AlmaLinux 8 | tomcat +7 | 1:9.0.62-5.el8_8.2 | ALSA-2023:5928 |
| AlmaLinux 8 | varnish +2 | 6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1 | ALSA-2023:5989 |
| AlmaLinux 8 | varnish-modules | 0.15.0-6.module_el8.5.0+76+a10ffa55 | ALSA-2023:5989 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | dotnet6.0 | 6.0.123-1.el9_2 | RLSA-2023:5708 |
| Rocky Linux 9 | dotnet7.0 | 7.0.112-1.el9_2 | RLSA-2023:5749 |
| Rocky Linux 9 | go-toolset | 1.19.13-1.el9_2 | RLSA-2023:5738 |
| Rocky Linux 9 | nghttp2 | 1.43.0-5.el9_2.1 | RLSA-2023:6746, RLSA-2023:5838 |
| Rocky Linux 9 | nginx | 1:1.22.1-3.module+el9.2.0+15280+45c505d6.1 | RLSA-2023:6120 |
| Rocky Linux 9 | nodejs | 1:16.20.2-3.el9_2 | RLSA-2023:5765 |
| Rocky Linux 9 | nodejs-nodemon | 3.0.1-1.module+el9.7.0+40017+f0db1785 | RLSA-2023:5849 |
| Rocky Linux 9 | nodejs-packaging | 2021.06-4.module+el9.7.0+40017+f0db1785 | RLSA-2023:5849 |
| Rocky Linux 9 | toolbox | 0.0.99.3-10.el9_2.rocky.0.1 | RLSA-2023:6077 |
| Rocky Linux 9 | varnish | 6.6.2-3.el9_2.1 | RLSA-2023:5924 |
| Rocky Linux 8 | delve | 1.9.1-1.module+el8.8.0+1263+19d1a562 | RLSA-2023:5721 |
| Rocky Linux 8 | golang +1 | 1.19.13-1.module+el8.8.0+1526+386b5e05 | RLSA-2023:5721 |
| Rocky Linux 8 | grafana | 7.5.15-5.el8_8 | RLSA-2023:5863 |
| Rocky Linux 8 | nghttp2 | 1.33.0-5.el8_8 | RLSA-2023:5837 |
| Rocky Linux 8 | nodejs | 1:16.20.2-3.module+el8.8.0+1543+5f4d09d5 | RLSA-2024:1444, RLSA-2023:5850 |
| Rocky Linux 8 | nodejs-nodemon | 3.0.1-1.module+el8.8.0+1459+02651ab6 | RLSA-2024:1444, RLSA-2023:7205, RLSA-2023:5869 |
| Rocky Linux 8 | nodejs-packaging | 26-1.module+el8.8.0+1461+f50bb75a | RLSA-2024:1444, RLSA-2023:7205, RLSA-2023:5869 |
| Rocky Linux 8 | tomcat | 1:9.0.62-5.el8_8.2 | RLSA-2023:5928 |
| Rocky Linux 8 | varnish | 6.0.8-3.module+el8.8.0+1552+3570c668.1 | RLSA-2023:5989 |
| Rocky Linux 8 | varnish-modules | 0.15.0-6.module+el8.5.0+677+2a78a869 | RLSA-2023:5989 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES 15 SP6 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| SLES 15 SP6 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES 15 SP6 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES 15 SP6 | nginx | 1.21.5-150600.10.3.1 | SUSE-SU-2025:0283-1 |
| SLES 15 SP5 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLES 15 SP5 | go1.20 | 1.20.10-150000.1.29.1 | SUSE-SU-2023:4068-1 |
| SLES 15 SP5 | go1.20-openssl | 1.20.11.1-150000.1.14.1 | SUSE-SU-2023:4472-1 |
| SLES 15 SP5 | go1.21 | 1.21.3-150000.1.12.1 | SUSE-SU-2023:4069-1 |
| SLES 15 SP5 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
| SLES 15 SP5 | grpc | 1.60.0-150400.8.3.2 | SUSE-SU-2024:0573-1 |
| SLES 15 SP5 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLES 15 SP5 | kubernetes1.24 | 1.24.17-150500.3.22.1 | SUSE-SU-2024:3342-1 |
| SLES 15 SP5 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES 15 SP5 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| SLES 15 SP5 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES 15 SP5 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES 15 SP5 | kubevirt | 1.1.0-150500.8.6.1 | SUSE-SU-2023:4624-1 |
| SLES 15 SP5 | netty | 4.1.100-150200.4.20.1 | SUSE-SU-2023:4163-1 |
| SLES 15 SP5 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLES 15 SP5 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLES 15 SP5 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SLES 15 SP5 | nodejs18 | 18.18.2-150400.9.15.1 | SUSE-SU-2023:4133-1 |
| SLES 15 SP5 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES 15 SP5 | re2 | 20240201-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES 15 SP5 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLES 15 SP4 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLES 15 SP4 | go1.20 | 1.20.10-150000.1.29.1 | SUSE-SU-2023:4068-1 |
| SLES 15 SP4 | go1.20-openssl | 1.20.11.1-150000.1.14.1 | SUSE-SU-2023:4472-1 |
| SLES 15 SP4 | go1.21 | 1.21.3-150000.1.12.1 | SUSE-SU-2023:4069-1 |
| SLES 15 SP4 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
| SLES 15 SP4 | grpc | 1.60.0-150400.8.3.2 | SUSE-SU-2024:0573-1 |
| SLES 15 SP4 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLES 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 | SUSE-SU-2024:3341-1 |
| SLES 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| SLES 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES 15 SP4 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLES 15 SP4 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLES 15 SP4 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SLES 15 SP4 | nodejs16 | 16.20.2-150400.3.27.2 | SUSE-SU-2023:4155-1 |
| SLES 15 SP4 | nodejs18 | 18.18.2-150400.9.15.1 | SUSE-SU-2023:4133-1 |
| SLES 15 SP4 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES 15 SP4 | re2 | 20240201-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES 15 SP4 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLES 15 SP3 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLES 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SLES 15 SP3 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLES 15 SP3 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLES 15 SP3 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SLES 15 SP3 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SLES 15 SP3 | nodejs16 | 16.20.2-150300.7.30.1 | SUSE-SU-2023:4207-1 |
| SLES 15 SP3 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLES 15 SP2 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLES 15 SP2 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLES 15 SP2 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLES 15 SP2 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| SLES 15 SP2 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SLES 15 SP2 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SLES 15 SP2 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
Show 28 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | nghttp2 | 1.40.0-150000.3.17.1 | SUSE-SU-2023:4492-1 |
| SLES 15 SP1 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| SLES 12 SP5 | nghttp2 | 1.39.2-3.13.1 | SUSE-SU-2023:4199-1 |
| SLES 12 SP5 | tomcat | 9.0.115-3.160.1 | SUSE-SU-2026:1058-1 |
| SLES 12 | nodejs14 | 14.21.3-6.49.1 | SUSE-SU-2023:4259-1 |
| SLES 12 | nodejs16 | 16.20.2-8.36.1 | SUSE-SU-2023:4150-1 |
| SLES 12 | nodejs18 | 18.18.2-8.15.1 | SUSE-SU-2023:4132-1 |
| SLES 3 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES 3 | python-abseil | 1.4.0-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES 3 | python-grpcio | 1.60.0-150400.9.3.2 | SUSE-SU-2024:0573-1 |
| SLES for SAP 15 SP5 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SLES for SAP 15 SP4 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLES for SAP 15 SP4 | grpc | 1.60.0-150400.8.3.2 | SUSE-SU-2024:0573-1 |
| SLES for SAP 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 | SUSE-SU-2024:3341-1 |
| SLES for SAP 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES for SAP 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| SLES for SAP 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES for SAP 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES for SAP 15 SP4 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SLES for SAP 15 SP4 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES for SAP 15 SP4 | re2 | 20240201-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLES for SAP 15 SP3 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLES for SAP 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SLES for SAP 15 SP3 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLES for SAP 15 SP3 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLES for SAP 15 SP3 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SLES for SAP 15 SP3 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SLES for SAP 15 SP3 | nodejs16 | 16.20.2-150300.7.30.1 | SUSE-SU-2023:4207-1 |
| SLES for SAP 15 SP3 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLES for SAP 15 SP2 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLES for SAP 15 SP2 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLES for SAP 15 SP2 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLES for SAP 15 SP2 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| SLES for SAP 15 SP2 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SLES for SAP 15 SP2 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SLES for SAP 15 SP2 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLES for SAP 15 SP1 | nghttp2 | 1.40.0-150000.3.17.1 | SUSE-SU-2023:4492-1 |
| SLES for SAP 15 SP1 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| SLES for SAP 12 SP5 | nghttp2 | 1.39.2-3.13.1 | SUSE-SU-2023:4199-1 |
| SLE Micro 5.5 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLE Micro 5.5 | kubevirt | 1.1.0-150500.8.6.1 | SUSE-SU-2023:4624-1 |
| SLE Micro 5.5 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE Micro 5.5 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLE Micro 5.4 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLE Micro 5.4 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE Micro 5.4 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLE Micro 5.3 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLE Micro 5.3 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE Micro 5.3 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLE Micro 5.2 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE Micro 5.1 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE HPC 15 SP5 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SLE HPC 15 SP4 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SLE HPC 15 SP4 | grpc | 1.60.0-150400.8.3.2 | SUSE-SU-2024:0573-1 |
| SLE HPC 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 | SUSE-SU-2024:3341-1 |
| SLE HPC 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLE HPC 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| SLE HPC 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLE HPC 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLE HPC 15 SP4 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SLE HPC 15 SP4 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLE HPC 15 SP4 | re2 | 20240201-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SLE HPC 15 SP3 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLE HPC 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SLE HPC 15 SP3 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLE HPC 15 SP3 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE HPC 15 SP3 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SLE HPC 15 SP3 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SLE HPC 15 SP3 | nodejs16 | 16.20.2-150300.7.30.1 | SUSE-SU-2023:4207-1 |
| SLE HPC 15 SP3 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLE HPC 15 SP2 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SLE HPC 15 SP2 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SLE HPC 15 SP2 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SLE HPC 15 SP2 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| SLE HPC 15 SP2 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SLE HPC 15 SP2 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SLE HPC 15 SP2 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SLE HPC 15 SP1 | nghttp2 | 1.40.0-150000.3.17.1 | SUSE-SU-2023:4492-1 |
| SLE HPC 15 SP1 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| SUSE Package Hub 12 | go | 1.21-41.1 | openSUSE-SU-2023:0360-1 |
| SUSE Package Hub 12 | go1.21 | 1.21.3-2.1 | openSUSE-SU-2023:0360-1 |
| SUSE Manager Server 4.3 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SUSE Manager Server 4.2 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SUSE Manager Server 4.2 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SUSE Manager Server 4.2 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SUSE Manager Server 4.2 | nodejs16 | 16.20.2-150300.7.30.1 | SUSE-SU-2023:4207-1 |
| SUSE Manager Server 4.2 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
| SUSE Manager Proxy 4.3 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SUSE Manager Proxy 4.3 | grpc | 1.60.0-150400.8.3.2 | SUSE-SU-2024:0573-1 |
| SUSE Manager Proxy 4.3 | nginx | 1.21.5-150400.3.6.1 | SUSE-SU-2025:0282-1 |
| SUSE Manager Proxy 4.3 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SUSE Manager Proxy 4.3 | re2 | 20240201-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SUSE Manager Proxy 4.2 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SUSE Linux Enterprise Installer Updates 15 SP5 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SUSE Linux Enterprise Installer Updates 15 SP5 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SUSE Linux Enterprise Installer Updates 15 SP4 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| SUSE Linux Enterprise Installer Updates 15 SP4 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| SUSE Enterprise Storage 7.1 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| SUSE Enterprise Storage 7.1 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SUSE Enterprise Storage 7.1 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| SUSE Enterprise Storage 7.1 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| SUSE Enterprise Storage 7.1 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| SUSE Enterprise Storage 7.1 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
| SUSE Enterprise Storage 7.1 | nodejs16 | 16.20.2-150300.7.30.1 | SUSE-SU-2023:4207-1 |
| SUSE Enterprise Storage 7.1 | tomcat | 9.0.82-150200.46.1 | SUSE-SU-2023:4129-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache2 | 2.4.58-1.1 | openSUSE-SU-2024:13350-1 |
| openSUSE Tumbleweed | bun | 1.4.4-1.1 | openSUSE-SU-2026:12316-1 |
| openSUSE Tumbleweed | cmctl | 1.13.2-1.1 | openSUSE-SU-2024:13376-1 |
| openSUSE Tumbleweed | kubernetes1.28 | 1.28.13-2.1 | openSUSE-SU-2024:14292-1 |
| openSUSE Tumbleweed | kubevirt | 1.1.0-1.1 | openSUSE-SU-2024:13443-1 |
| openSUSE Tumbleweed | kubevirt1.8 +1 | 1.8.3-1.1 | openSUSE-SU-2026:11091-1, openSUSE-SU-2026:11057-1 |
| openSUSE Tumbleweed | lighttpd | 1.4.73-1.1 | openSUSE-SU-2024:13390-1 |
| openSUSE Tumbleweed | netty | 4.1.114-1.1 | openSUSE-SU-2024:14442-1 |
| openSUSE Tumbleweed | nghttp2 | 1.57.0-1.1 | openSUSE-SU-2024:13336-1 |
| openSUSE Tumbleweed | nodejs20 | 20.8.1-1.1 | openSUSE-SU-2024:13337-1 |
| openSUSE Tumbleweed | teleport | 14.1.1-1.1 | openSUSE-SU-2024:13360-1 |
| openSUSE Tumbleweed | tomcat | 9.0.82-1.1 | openSUSE-SU-2024:13331-1 |
| openSUSE Tumbleweed | tomcat10 | 10.1.14-1.1 | openSUSE-SU-2024:13441-1 |
| openSUSE Tumbleweed | varnish | 7.4.2-1.1 | openSUSE-SU-2024:13482-1 |
| openSUSE Tumbleweed | velero | 1.12.2-1.1 | openSUSE-SU-2024:13466-1 |
| openSUSE Tumbleweed | vinyl-cache | 9.0.0-1.1 | openSUSE-SU-2026:10751-1 |
| openSUSE Leap 15.6 | kubernetes1.24 | 1.24.17-150500.3.22.1 | SUSE-SU-2024:3342-1 |
| openSUSE Leap 15.6 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| openSUSE Leap 15.6 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| openSUSE Leap 15.6 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| openSUSE Leap 15.6 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| openSUSE Leap 15.6 | nginx | 1.21.5-150600.10.3.1 | SUSE-SU-2025:0283-1 |
| openSUSE Leap 15.5 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.5 | go1.20 | 1.20.10-150000.1.29.1 | SUSE-SU-2023:4068-1 |
| openSUSE Leap 15.5 | go1.20-openssl | 1.20.11.1-150000.1.14.1 | SUSE-SU-2023:4472-1 |
| openSUSE Leap 15.5 | go1.21 | 1.21.3-150000.1.12.1 | SUSE-SU-2023:4069-1 |
| openSUSE Leap 15.5 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
| openSUSE Leap 15.5 | grpc | 1.60.0-150400.8.3.2 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.5 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| openSUSE Leap 15.5 | kubernetes1.24 | 1.24.17-150500.3.22.1 | SUSE-SU-2024:3342-1 |
| openSUSE Leap 15.5 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| openSUSE Leap 15.5 | kubernetes1.26 | 1.26.15-150400.9.11.1 | SUSE-SU-2024:3094-1 |
| openSUSE Leap 15.5 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| openSUSE Leap 15.5 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| openSUSE Leap 15.5 | kubevirt | 1.1.0-150500.8.6.1 | SUSE-SU-2023:4624-1 |
| openSUSE Leap 15.5 | netty | 4.1.100-150200.4.20.1 | SUSE-SU-2023:4163-1 |
| openSUSE Leap 15.5 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| openSUSE Leap 15.5 | nghttp2 +1 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| openSUSE Leap 15.5 | opencensus-proto | 0.3.0+git.20200721-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.5 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.5 | python-abseil | 1.4.0-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.5 | python-grpcio | 1.60.0-150400.9.3.2 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.5 | re2 | 20240201-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap 15.4 | go1.20 | 1.20.10-150000.1.29.1 | SUSE-SU-2023:4068-1 |
| openSUSE Leap 15.4 | go1.20-openssl | 1.20.11.1-150000.1.14.1 | SUSE-SU-2023:4472-1 |
| openSUSE Leap 15.4 | go1.21 | 1.21.3-150000.1.12.1 | SUSE-SU-2023:4069-1 |
| openSUSE Leap 15.4 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
| openSUSE Leap 15.4 | jetty-minimal | 9.4.53-150200.3.22.1 | SUSE-SU-2023:4210-1 |
| openSUSE Leap 15.4 | netty | 4.1.100-150200.4.20.1 | SUSE-SU-2023:4163-1 |
| openSUSE Leap 15.4 | netty-tcnative | 2.0.62-150200.3.16.1 | SUSE-SU-2023:4163-1 |
| openSUSE Leap 15.4 | nghttp2 +1 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| openSUSE Leap 15.4 | nodejs10 | 10.24.1-150000.1.62.3 | SUSE-SU-2023:4295-1 |
| openSUSE Leap 15.4 | nodejs12 | 12.22.12-150200.4.53.2 | SUSE-SU-2023:4374-1 |
| openSUSE Leap 15.4 | nodejs14 | 14.21.3-150200.15.52.2 | SUSE-SU-2023:4373-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap Micro 5.4 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| openSUSE Leap Micro 5.4 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap Micro 5.3 | abseil-cpp | 20230802.1-150400.10.4.1 | SUSE-SU-2024:0573-1 |
| openSUSE Leap Micro 5.3 | nghttp2 | 1.40.0-150200.12.1 | SUSE-SU-2023:4200-1 |
| openSUSE Leap Micro 5.3 | protobuf | 25.1-150400.9.3.1 | SUSE-SU-2024:0573-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.21.3-r0 | — |
| Alpine v3.24 | grpc | 1.59.3-r0 | — |
| Alpine v3.24 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.24 | netdata | 1.43.2-r1 | — |
| Alpine v3.24 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.24 | nginx | 1.24.0-r12 | — |
| Alpine v3.24 | openjdk21 | 21.0.2_p13-r0 | — |
| Alpine v3.24 | trafficserver9 | 9.2.3-r0 | — |
| Alpine v3.24 | varnish | 7.4.2-r0 | — |
| Alpine v3.23 | go | 1.21.3-r0 | — |
| Alpine v3.23 | grpc | 1.59.3-r0 | — |
| Alpine v3.23 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.23 | netdata | 1.43.2-r1 | — |
| Alpine v3.23 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.23 | nginx | 1.24.0-r12 | — |
| Alpine v3.23 | openjdk21 | 21.0.2_p13-r0 | — |
| Alpine v3.23 | trafficserver9 | 9.2.3-r0 | — |
| Alpine v3.23 | varnish | 7.4.2-r0 | — |
| Alpine v3.22 | go | 1.21.3-r0 | — |
| Alpine v3.22 | grpc | 1.59.3-r0 | — |
| Alpine v3.22 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.22 | netdata | 1.43.2-r1 | — |
| Alpine v3.22 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.22 | nginx | 1.24.0-r12 | — |
| Alpine v3.22 | openjdk21 | 21.0.2_p13-r0 | — |
| Alpine v3.22 | trafficserver9 | 9.2.3-r0 | — |
| Alpine v3.22 | varnish | 7.4.2-r0 | — |
| Alpine v3.21 | go | 1.21.3-r0 | — |
| Alpine v3.21 | grpc | 1.59.3-r0 | — |
| Alpine v3.21 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.21 | netdata | 1.43.2-r1 | — |
| Alpine v3.21 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.21 | nginx | 1.24.0-r12 | — |
| Alpine v3.21 | openjdk21 | 21.0.2_p13-r0 | — |
| Alpine v3.21 | trafficserver9 | 9.2.3-r0 | — |
| Alpine v3.21 | varnish | 7.4.2-r0 | — |
| Alpine v3.20 | dotnet6-build | 6.0.123-r0 | — |
| Alpine v3.20 | dotnet6-runtime | 6.0.23-r0 | — |
| Alpine v3.20 | go | 1.21.3-r0 | — |
| Alpine v3.20 | grpc | 1.59.3-r0 | — |
| Alpine v3.20 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.20 | netdata | 1.43.2-r1 | — |
| Alpine v3.20 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.20 | nginx | 1.24.0-r12 | — |
| Alpine v3.20 | openjdk21 | 21.0.2_p13-r0 | — |
| Alpine v3.20 | varnish | 7.4.2-r0 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | dotnet6-build | 6.0.123-r0 | — |
| Alpine v3.19 | dotnet6-runtime | 6.0.23-r0 | — |
| Alpine v3.19 | dotnet7-build | 7.0.112-r0 | — |
| Alpine v3.19 | dotnet7-runtime | 7.0.12-r0 | — |
| Alpine v3.19 | go | 1.21.3-r0 | — |
| Alpine v3.19 | h2o | 2.2.6-r10 | — |
| Alpine v3.19 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.19 | netdata | 1.43.2-r1 | — |
| Alpine v3.19 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.19 | nginx | 1.24.0-r12 | — |
| Alpine v3.19 | openjdk21 | 21.0.2_p13-r0 | — |
| Alpine v3.19 | varnish | 7.4.2-r0 | — |
| Alpine v3.18 | dotnet6-build | 6.0.123-r0 | — |
| Alpine v3.18 | dotnet6-runtime | 6.0.23-r0 | — |
| Alpine v3.18 | dotnet7-build | 7.0.112-r0 | — |
| Alpine v3.18 | dotnet7-runtime | 7.0.12-r0 | — |
| Alpine v3.18 | go | 1.20.10-r0 | — |
| Alpine v3.18 | h2o | 2.2.6-r10 | — |
| Alpine v3.18 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.18 | nghttp2 | 1.57.0-r0 | — |
| Alpine v3.18 | nginx | 1.24.0-r7 | — |
| Alpine v3.18 | varnish | 7.3.1-r0 | — |
| Alpine v3.17 | jetty-runner | 9.4.53.20231009-r0 | — |
| Alpine v3.17 | lighttpd | 1.4.73-r0 | — |
| Alpine v3.17 | nghttp2 | 1.51.0-r2 | — |
| Alpine v3.17 | nginx | 1.22.1-r1 | — |
| Alpine v3.17 | varnish | 7.3.2-r0 | — |
| Alpine v3.16 | lighttpd | 1.4.73-r0 | — |
| Alpine v3.16 | nghttp2 | 1.47.0-r2 | — |
| Alpine v3.16 | nginx | 1.22.1-r1 | — |
| Alpine v3.15 | lighttpd | 1.4.73-r0 | — |
| Alpine v3.15 | nghttp2 | 1.46.0-r2 | — |
| Alpine v3.15 | nginx | 1.20.2-r2 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | dotnet +4 | 6.0.123-1.amzn2023.0.1 | ALAS2023-2023-389 |
| Amazon Linux 2023 | dotnet-host +6 | 6.0.23-1.amzn2023.0.1 | ALAS2023-2023-389 |
| Amazon Linux 2023 | ecs-service-connect-agent | v1.27.2.0-1.amzn2023 | ALAS2023-2023-420 |
| Amazon Linux 2023 | golang +6 | 1.20.10-1.amzn2023.0.1 | ALAS2023-2023-394 |
| Amazon Linux 2023 | grpc +5 | 1.60.0-10.amzn2023 | ALAS2023-2024-474 |
| Amazon Linux 2023 | nghttp2 +2 | 1.57.0-1.amzn2023.0.1 | ALAS2023-2023-392 |
| Amazon Linux 2023 | nginx +9 | 1:1.24.0-1.amzn2023.0.2 | ALAS2023-2023-393 |
| Amazon Linux 2023 | nodejs +4 | 1:18.18.0-1.amzn2023.0.1 | ALAS2023-2023-391 |
| Amazon Linux 2023 | nodejs-npm | 1:9.8.1-1.18.18.0.1.amzn2023.0.1 | ALAS2023-2023-391 |
| Amazon Linux 2023 | tomcat9 +7 | 1:9.0.71-1.amzn2023.0.6 | ALAS2023-2023-390 |
| Amazon Linux 2023 | v8-10.2-devel | 3:10.2.154.26-1.18.18.0.1.amzn2023.0.1 | ALAS2023-2023-391 |
| Amazon Linux 2 | golang +6 | 1.20.10-1.amzn2.0.1 | ALAS2-2023-2313 |
| Amazon Linux 2 | nghttp2 +2 | 1.41.0-1.amzn2.0.4 | ALAS2-2023-2312 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | application-gateway-kubernetes-ingress | 1.4.0-15 | — |
| Azure Linux 3 | blobfuse2 | 2.1.0-4 | — |
| Azure Linux 3 | cert-manager | 1.11.2-5 | — |
| Azure Linux 3 | cf-cli | 8.4.0-13 | — |
| Azure Linux 3 | cmake | 3.21.4-10 | — |
| Azure Linux 3 | containerd | 1.7.13-3 | — |
| Azure Linux 3 | containerized-data-importer | 1.55.0-15 | — |
| Azure Linux 3 | coredns | 1.11.1-1 | — |
| Azure Linux 3 | docker-buildx | 0.14.0-1 | — |
| Azure Linux 3 | docker-compose | 2.27.0-1 | — |
| Azure Linux 3 | etcd | 3.5.6-11 | — |
| Azure Linux 3 | flannel | 0.14.0-18 | — |
| Azure Linux 3 | grpc | 1.42.0-7 | — |
| Azure Linux 3 | helm | 3.15.2-1 | — |
| Azure Linux 3 | httpd | No fix yet | — |
| Azure Linux 3 | ig | 0.30.0-1 | — |
| Azure Linux 3 | influxdb | 2.6.1-11 | — |
| Azure Linux 3 | jx | 3.2.236-13 | — |
| Azure Linux 3 | kata-containers | 3.1.0-8 | — |
| Azure Linux 3 | kata-containers-cc | 0.6.1-2 | — |
| Azure Linux 3 | keda | 2.4.0-14 | — |
| Azure Linux 3 | kube-vip-cloud-provider | 0.0.2-12 | — |
| Azure Linux 3 | kubernetes | 1.28.3-1 | — |
| Azure Linux 3 | kubevirt | 0.59.0-9 | — |
| Azure Linux 3 | local-path-provisioner | 0.0.21-12 | — |
| Azure Linux 3 | moby-containerd-cc | 1.7.1-5 | — |
| Azure Linux 3 | moby-engine | 25.0.3-1 | — |
| Azure Linux 3 | multus | 3.8-12 | — |
| Azure Linux 3 | nginx | 1.25.4-1 | — |
| Azure Linux 3 | node-problem-detector | 0.8.10-16 | — |
| Azure Linux 3 | opa | 0.50.2-6 | — |
| Azure Linux 3 | packer | 1.8.1-14 | — |
| Azure Linux 3 | podman | 5.6.1-2 | — |
| Azure Linux 3 | prometheus | 2.37.0-10 | — |
| Azure Linux 3 | prometheus-adapter | 0.10.0-2 | — |
| Azure Linux 3 | sriov-network-device-plugin | 3.5.1-2 | — |
| Azure Linux 3 | telegraf | 1.27.3-3 | — |
| Azure Linux 3 | vitess | 16.0.2-5 | — |
| Azure Linux 2 (CBL-Mariner) | application-gateway-kubernetes-ingress | 1.4.0-15 | — |
| Azure Linux 2 (CBL-Mariner) | azcopy | 10.15.0-13 | — |
| Azure Linux 2 (CBL-Mariner) | cert-manager | 1.11.2-5 | — |
| Azure Linux 2 (CBL-Mariner) | cf-cli | 8.4.0-13 | — |
| Azure Linux 2 (CBL-Mariner) | cmake | 3.21.4-10 | — |
| Azure Linux 2 (CBL-Mariner) | containerized-data-importer | 1.55.0-15 | — |
| Azure Linux 2 (CBL-Mariner) | coredns | 1.11.1-1 | — |
| Azure Linux 2 (CBL-Mariner) | cri-o | 1.21.7-2 | — |
| Azure Linux 2 (CBL-Mariner) | cri-tools | 1.28.0-2 | — |
| Azure Linux 2 (CBL-Mariner) | csi-driver-lvm | 0.4.1-13 | — |
| Azure Linux 2 (CBL-Mariner) | etcd | 3.5.6-11 | — |
| Azure Linux 2 (CBL-Mariner) | flannel | 0.14.0-18 | — |
| Azure Linux 2 (CBL-Mariner) | golang | 1.20.10 | — |
| Azure Linux 2 (CBL-Mariner) | grpc | 1.42.0-7 | — |
| Azure Linux 2 (CBL-Mariner) | helm | 3.14.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | influxdb | 2.6.1-11 | — |
| Azure Linux 2 (CBL-Mariner) | jx | 3.2.236-13 | — |
| Azure Linux 2 (CBL-Mariner) | kata-containers | 3.1.0-8 | — |
| Azure Linux 2 (CBL-Mariner) | kata-containers-cc | 0.6.1-2 | — |
| Azure Linux 2 (CBL-Mariner) | keda | 2.4.0-14 | — |
| Azure Linux 2 (CBL-Mariner) | kube-vip-cloud-provider | 0.0.2-12 | — |
| Azure Linux 2 (CBL-Mariner) | kubernetes | 1.28.3-1 | — |
| Azure Linux 2 (CBL-Mariner) | kubevirt | 0.59.0-9 | — |
| Azure Linux 2 (CBL-Mariner) | kured | 1.9.1-14 | — |
| Azure Linux 2 (CBL-Mariner) | libcontainers-common | 20210626-2 | — |
| Azure Linux 2 (CBL-Mariner) | local-path-provisioner | 0.0.21-12 | — |
| Azure Linux 2 (CBL-Mariner) | moby-buildx | 0.7.1-14 | — |
| Azure Linux 2 (CBL-Mariner) | moby-cli +1 | 20.10.25-2 | — |
| Azure Linux 2 (CBL-Mariner) | moby-compose | 2.17.2-5 | — |
| Azure Linux 2 (CBL-Mariner) | moby-containerd | 1.6.22-2 | — |
| Azure Linux 2 (CBL-Mariner) | moby-containerd-cc | 1.7.1-5 | — |
| Azure Linux 2 (CBL-Mariner) | multus | 3.8-12 | — |
| Azure Linux 2 (CBL-Mariner) | nghttp2 | 1.57.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | nginx | 1.22.1-11 | — |
| Azure Linux 2 (CBL-Mariner) | nmi | 1.8.7-14 | — |
| Azure Linux 2 (CBL-Mariner) | node-problem-detector | 0.8.10-16 | — |
| Azure Linux 2 (CBL-Mariner) | nodejs18 | 18.18.2-1 | — |
| Azure Linux 2 (CBL-Mariner) | opa | 0.50.2-6 | — |
| Azure Linux 2 (CBL-Mariner) | packer | 1.8.1-14 | — |
| Azure Linux 2 (CBL-Mariner) | podman | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | prometheus | 2.37.0-10 | — |
| Azure Linux 2 (CBL-Mariner) | prometheus-adapter | 0.10.0-2 | — |
| Azure Linux 2 (CBL-Mariner) | rook | 1.6.2-14 | — |
| Azure Linux 2 (CBL-Mariner) | skopeo | 1.12.0-4 | — |
| Azure Linux 2 (CBL-Mariner) | sriov-network-device-plugin | 3.5.1-2 | — |
| Azure Linux 2 (CBL-Mariner) | telegraf | 1.27.3-3 | — |
| Azure Linux 2 (CBL-Mariner) | terraform | 1.3.2-11 | — |
| Azure Linux 2 (CBL-Mariner) | vitess | 16.0.2-5 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | conmon | 3:2.1.3-7.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | cri-o | 1.26.3-3.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | cri-tools | 1.26.1-3.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | dotnet-host +6 | 7.0.12-1.0.1.el9_2 | ELSA-2023-5749 |
| Oracle Linux 9 | dotnet-hostfxr-6.0 +5 | 6.0.23-1.0.1.el9_2 | ELSA-2023-5708 |
| Oracle Linux 9 | dotnet-sdk-6.0 +2 | 6.0.123-1.0.1.el9_2 | ELSA-2023-5708 |
| Oracle Linux 9 | dotnet-sdk-7.0 +3 | 7.0.112-1.0.1.el9_2 | ELSA-2023-5749 |
| Oracle Linux 9 | etcd | 3.5.9-2.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | golang +7 | 1.19.13-1.el9_2 | ELSA-2023-5738 |
| Oracle Linux 9 | grafana | 9.0.9-4.el9_2 | ELSA-2023-5867 |
| Oracle Linux 9 | helm | 3.12.0-3.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | istio +1 | 1.17.8-1.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | kata | 1.12.1-14.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | kata-image | 1.12.1-9.9.ol9_202311161804 | ELSA-2023-13053 |
| Oracle Linux 9 | kata-shim +4 | 1.12.1-9.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | kubeadm +2 | 1.26.10-2.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | kubernetes-cni +1 | 1.1.2-3.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | kubernetes-cni-plugins | 1.2.0-4.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | nghttp2 +2 | 1.43.0-5.el9_2.1 | ELSA-2023-6746, ELSA-2023-5838 |
| Oracle Linux 9 | nginx +9 | 1:1.20.1-14.0.1.el9_2.1 | ELSA-2023-6120, ELSA-2023-5711 |
| Oracle Linux 9 | nodejs +3 | 1:16.20.2-3.0.1.el9_2 | ELSA-2023-5849, ELSA-2023-5765 |
| Oracle Linux 9 | nodejs-devel | 1:18.18.2-2.module+el9.2.0+21194+c0bbf6cf | ELSA-2023-5849 |
| Oracle Linux 9 | nodejs-nodemon | 3.0.1-1.module+el9.2.0+21169+1d24b6cc | ELSA-2023-5849 |
| Oracle Linux 9 | nodejs-packaging +1 | 2021.06-4.module+el9.1.0+20762+f52d7401 | ELSA-2023-5849 |
| Oracle Linux 9 | npm | 1:8.19.4-1.16.20.2.3.0.1.el9_2 | ELSA-2023-5849, ELSA-2023-5765 |
| Oracle Linux 9 | olcnectl +15 | 1.7.5-17.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | tomcat +7 | 1:9.0.62-11.el9_2.3 | ELSA-2023-5929 |
| Oracle Linux 9 | varnish +2 | 6.6.2-3.el9_2.1 | ELSA-2023-5924 |
| Oracle Linux 9 | virtctl | 0.58.0-4.el9 | ELSA-2023-13053 |
| Oracle Linux 9 | yq | 4.34.1-3.el9 | ELSA-2023-13053 |
| Oracle Linux 8 | conmon | 3:2.1.3-7.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | cri-o | 1.25.2-3.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | cri-tools | 1.25.0-2.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | delve | 1.9.1-1.0.1.module+el8.8.0+20964+30a27755 | ELSA-2023-5721 |
| Oracle Linux 8 | dotnet +4 | 7.0.112-1.0.1.el8_8 | ELSA-2023-5709 |
| Oracle Linux 8 | dotnet-host +6 | 7.0.12-1.0.1.el8_8 | ELSA-2023-5709 |
| Oracle Linux 8 | dotnet-hostfxr-6.0 +5 | 6.0.23-1.0.1.el8_8 | ELSA-2023-5710 |
| Oracle Linux 8 | dotnet-sdk-6.0 +2 | 6.0.123-1.0.1.el8_8 | ELSA-2023-5710 |
| Oracle Linux 8 | etcd | 3.5.9-2.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | golang +7 | 1.19.13-1.module+el8.8.0+21189+9e6e1f9f | ELSA-2023-5721 |
| Oracle Linux 8 | grafana | 7.5.15-5.el8_8 | ELSA-2023-5863 |
| Oracle Linux 8 | helm | 3.11.1-2.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | istio +1 | 1.16.7-2.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | kata | 1.12.1-14.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | kata-image | 1.12.1-9.9.ol8_202311161805 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | kata-shim +4 | 1.12.1-9.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | kubeadm +2 | 1.25.15-1.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | kubernetes-cni +1 | 1.0.1-3.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | kubernetes-cni-plugins | 1.0.1-4.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | nghttp2 +2 | 1.33.0-5.el8_8 | ELSA-2023-5837 |
| Oracle Linux 8 | nginx +8 | 1:1.20.1-1.0.1.module+el8.8.0+21179+be6d61e7.1 | ELSA-2023-5713, ELSA-2023-5712 |
| Oracle Linux 8 | nodejs +3 | 1:16.20.2-3.0.1.module+el8.8.0+21192+e43554c6 | ELSA-2024-1444, ELSA-2023-7205, ELSA-2023-5869 |
| Oracle Linux 8 | nodejs-nodemon | 3.0.1-1.module+el8.8.0+21170+2efec6d4 | ELSA-2024-1444, ELSA-2023-7205, ELSA-2023-5869 |
| Oracle Linux 8 | nodejs-packaging | 26-1.module+el8.8.0+21172+0baa0bae | ELSA-2024-1444, ELSA-2023-7205, ELSA-2023-5869 |
| Oracle Linux 8 | nodejs-packaging-bundler | 2021.06-4.module+el8.7.0+20766+0a247725 | ELSA-2023-7205, ELSA-2023-5869 |
| Oracle Linux 8 | npm | 1:8.19.4-1.16.20.2.3.0.1.module+el8.8.0+21192+e43554c6 | ELSA-2024-1444, ELSA-2023-7205, ELSA-2023-5869 |
| Oracle Linux 8 | olcne-rook-chart +1 | 1.7.5-17.el8 | ELSA-2023-13054 |
| Oracle Linux 8 | olcnectl +13 | 1.6.5-10.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 8 | tomcat +7 | 1:9.0.62-5.el8_8.2 | ELSA-2023-5928 |
| Oracle Linux 8 | varnish +2 | 6.0.8-3.module+el8.8.0+21197+bdc2c048.1 | ELSA-2023-5989 |
| Oracle Linux 8 | varnish-modules | 0.15.0-6.module+el8.5.0+20320+0b4af72d | ELSA-2023-5989 |
| Oracle Linux 8 | virtctl | 0.58.0-4.el8 | ELSA-2023-13054 |
| Oracle Linux 8 | yq | 4.34.1-3.el8 | ELSA-2023-13054, ELSA-2023-13028 |
| Oracle Linux 7 | conmon | 3:2.1.3-7.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | cri-o | 1.25.2-3.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | cri-tools | 1.25.0-2.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | helm | 3.11.1-2.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | istio +1 | 1.16.7-2.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | kata | 1.12.1-14.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | kata-image | 1.12.1-9.9.ol7_202311161803 | ELSA-2023-13029 |
| Oracle Linux 7 | kata-shim +4 | 1.12.1-9.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | kubeadm +2 | 1.25.15-1.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | kubernetes-cni +1 | 1.0.1-3.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | kubernetes-cni-plugins | 1.0.1-4.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | olcnectl +13 | 1.6.5-10.el7 | ELSA-2023-13029 |
| Oracle Linux 7 | yq | 4.34.1-3.el7 | ELSA-2023-13029 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r49 | — |
| Wolfi rolling | amass | 5.1.1-r1 | — |
| Wolfi rolling | atlantis | 0.26.0-r3 | — |
| Wolfi rolling | aws-efs-csi-driver | 1.7.0-r6 | — |
| Wolfi rolling | bom | 0.6.0-r0 | — |
| Wolfi rolling | buildctl +1 | 0.29.0-r6 | — |
| Wolfi rolling | certificate-transparency | 1.3.2-r4 | — |
| Wolfi rolling | conftest | 0.46.0-r1 | — |
| Wolfi rolling | cortex | 1.21.0-r0 | — |
| Wolfi rolling | cosign | 2.2.0-r6 | — |
| Wolfi rolling | cue | 0.6.0-r7 | — |
| Wolfi rolling | dex | 2.37.0-r8 | — |
| Wolfi rolling | dgraph | 25.3.2-r2 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 3.4.1-r4 | — |
| Wolfi rolling | envoy-ratelimit | 0.0_git20231014-r3 | — |
| Wolfi rolling | flux-helm-controller | 0.36.2-r2 | — |
| Wolfi rolling | flux-kustomize-controller | 1.1.1-r2 | — |
| Wolfi rolling | flux-notification-controller | 1.1.0-r5 | — |
| Wolfi rolling | flux-source-controller | 1.1.2-r2 | — |
| Wolfi rolling | frp | 0.52.2-r0 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 1.0.7-r2 | — |
| Wolfi rolling | git-lfs | 3.4.0-r4 | — |
| Wolfi rolling | gitness | 3.0.0_beta2-r2 | — |
| Wolfi rolling | gke-gcloud-auth-plugin | 0.1.0-r16 | — |
| Wolfi rolling | gobuster | 3.8.2-r8 | — |
| Wolfi rolling | gomplate | 3.11.5-r6 | — |
| Wolfi rolling | grpcurl | 1.8.8-r3 | — |
| Wolfi rolling | grype | 0.72.0-r1 | — |
| Wolfi rolling | helm | 3.13.1-r2 | — |
| Wolfi rolling | helm-3 | 3.19.2-r1 | — |
| Wolfi rolling | helm-4 | 4.0.1-r1 | — |
| Wolfi rolling | hey | 0.1.4-r8 | — |
| Wolfi rolling | hugo | 0.119.0-r4 | — |
| Wolfi rolling | ip-masq-agent | 2.9.3-r3 | — |
| Wolfi rolling | k3d-tools | 5.8.3-r32 | — |
| Wolfi rolling | kaf | 0.2.6-r6 | — |
| Wolfi rolling | kind | 0.21.0-r0 | — |
| Wolfi rolling | ko | 0.15.0-r1 | — |
| Wolfi rolling | kots | 1.103.3-r1 | — |
| Wolfi rolling | kpt | 1.0.0_beta46-r0 | — |
| Wolfi rolling | kubeflow-katib | 0.16.0-r0 | — |
| Wolfi rolling | kubeflow-profile-controller +3 | 1.10.0-r20 | — |
| Wolfi rolling | kubernetes-csi-livenessprobe | 2.11.0-r4 | — |
| Wolfi rolling | kubescape | 3.0.0-r0 | — |
| Wolfi rolling | kubevela | 1.9.6-r4 | — |
| Wolfi rolling | kubewatch | 2.5.0-r7 | — |
| Wolfi rolling | mc | 0.20231202.020328-r0 | — |
| Wolfi rolling | memcached-exporter | 0.13.0-r7 | — |
| Wolfi rolling | metacontroller | 4.11.0-r6 | — |
| Wolfi rolling | metrics-server | 0.6.4-r5 | — |
| Wolfi rolling | minio | 0.20231025.063325-r0 | — |
| Wolfi rolling | nats | 0.3.2-r3 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.47.2-r3 | — |
| Wolfi rolling | nghttp2 | 1.57.0-r0 | — |
| Wolfi rolling | nginx-mainline | 1.25.2-r4 | — |
| Wolfi rolling | nginx-stable | 1.24.0-r3 | — |
| Wolfi rolling | nodetaint | 0.0.4-r6 | — |
| Wolfi rolling | nri-prometheus | 2.18.7-r3 | — |
| Wolfi rolling | oauth2-proxy | 7.5.1-r4 | — |
| Wolfi rolling | ollama | 0.1.4-r0 | — |
| Wolfi rolling | prometheus-adapter | 0.11.1-r4 | — |
| Wolfi rolling | pulumi | 3.91.1-r1 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.13.0-r5 | — |
| Wolfi rolling | pulumi-language-dotnet | 3.58.0-r0 | — |
| Wolfi rolling | pulumi-language-java | 0.9.8-r3 | — |
| Wolfi rolling | pulumi-language-yaml | 1.4.0-r0 | — |
| Wolfi rolling | rqlite | 7.21.4-r6 | — |
| Wolfi rolling | scorecard | 5.5.0-r0 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.3.4-r7 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.3.0-r6 | — |
| Wolfi rolling | sigstore-scaffolding | 0.6.8-r4 | — |
| Wolfi rolling | skaffold | 2.8.0-r4 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r16 | — |
| Wolfi rolling | spark-operator | 1.1.27-r13 | — |
| Wolfi rolling | src | 5.3.0-r0 | — |
| Wolfi rolling | stakater-reloader | 1.0.43-r2 | — |
| Wolfi rolling | terraform | 1.5.7-r0 | — |
| Wolfi rolling | terraform-provider-aws | 5.22.0-r1 | — |
| Wolfi rolling | terraform-provider-azurerm | 3.77.0-r1 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r18 | — |
| Wolfi rolling | up +3 | No fix yet | — |
| Wolfi rolling | weaviate | 1.22.0-r0 | — |
| Wolfi rolling | wireguard-go | 0.0.20250522-r14 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- HTTP/2 2.0 - Denial Of Service (DOS) EDB-52426 · remote · Sep 16, 2025
GitHub 27 repositories · most starred shown
-
bcdannyboy/CVE-2023-44487 ★ 248 · Oct 10, 2023
Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487
-
secengjeff/rapidresetclient ★ 76 · Oct 13, 2023
Tool for testing mitigations and exposure to Rapid Reset DDoS (CVE-2023-44487)
-
imabee101/CVE-2023-44487 ★ 56 · Oct 11, 2023
Proof of concept for DoS exploit
-
studiogangster/CVE-2023-44487 ★ 22 · Oct 16, 2023
A python based exploit to test out rapid reset attack (CVE-2023-44487)
-
nxenon/cve-2023-44487 ★ 15 · Nov 10, 2023
Examples for Implementing cve-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept
-
threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC ★ 12 · Dec 3, 2024
-
ndrscodes/http2-rst-stream-attacker ★ 6 · Nov 8, 2023
Highly configurable tool to check a server's vulnerability against CVE-2023-44487 by rapidly sending HEADERS and RST_STREAM frames and documenting the server's responses.
-
tpirate/cve-2023-44487-POC ★ 2 · Dec 14, 2025
poc for the rst dos attack discovered in 2023
-
moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack ★ 2 · Apr 14, 2025
HTTP/2 Rapid Reset Exploit PoC
-
ReToCode/golang-CVE-2023-44487 ★ 2 · Oct 25, 2023
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
Advisories 50
- openSUSE-SU-2026:12316-1 bun-1.4.4-1.1 on GA media SUSE / openSUSE Security Updates · Oct 29, 2026
- ALSA-2023:5738 Important: go-toolset and golang security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5711 Moderate: nginx security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5765 Important: nodejs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:6746 Important: nghttp2 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5867 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2368 Moderate: mod_http2 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5924 Important: varnish security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5838 Important: nghttp2 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5929 Important: tomcat security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5849 Important: nodejs:18 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:6077 Moderate: toolbox security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:6120 Moderate: nginx:1.22 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5749 Important: .NET 7.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5708 Important: dotnet6.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:1444 Important: nodejs:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3121 Moderate: httpd:2.4 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7205 Important: nodejs:20 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5869 Important: nodejs:18 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5837 Important: nghttp2 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5928 Important: tomcat security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5989 Important: varnish security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5850 Important: nodejs:16 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5863 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5721 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5709 Important: dotnet7.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5710 Important: dotnet6.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5712 Moderate: nginx:1.20 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5713 Moderate: nginx:1.22 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:4118 Red Hat Security Advisory: Red Hat Ceph Storage 5.3 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:0777 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHEA-2024:1870 Red Hat Enhancement Advisory: Advisory for publishing Helm 3.13.2 GA release Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7699 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7521 Red Hat Security Advisory: OpenShift Virtualization 4.13.6 RPMs security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7610 Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7344 Red Hat Security Advisory: openshift-gitops-kam security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7481 Red Hat Security Advisory: OpenShift Container Platform 4.11.54 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7288 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7325 Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6840 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6839 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6782 Red Hat Security Advisory: openshift-gitops-kam security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6781 Red Hat Security Advisory: openshift-pipelines-client security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6298 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.2 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6179 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6165 Red Hat Security Advisory: skupper-cli and skupper-router security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6077 Red Hat Security Advisory: toolbox security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6059 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5982 Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
References
- https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
- https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
- https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
- https://news.ycombinator.com/item?id=37831062
- https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
- https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
- https://github.com/envoyproxy/envoy/pull/30055
- https://github.com/haproxy/haproxy/issues/2312
- https://github.com/eclipse/jetty.project/issues/10679
- https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
- https://github.com/nghttp2/nghttp2/pull/1961
- https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
- https://github.com/alibaba/tengine/issues/1872
- https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
- https://news.ycombinator.com/item?id=37830987
- https://news.ycombinator.com/item?id=37830998
- https://github.com/caddyserver/caddy/issues/5877
- https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
- https://github.com/bcdannyboy/CVE-2023-44487
- https://github.com/grpc/grpc-go/pull/6703
- https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
- https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
- https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
- https://my.f5.com/manage/s/article/K000137106
- https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
- https://bugzilla.proxmox.com/show_bug.cgi?id=4988
- https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
- [oss-security] 20231010 Re: CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations mailing-list
- [oss-security] 20231010 CVE-2023-44487: HTTP/2 Rapid Reset attack against many implementations mailing-list
- https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
- https://github.com/microsoft/CBL-Mariner/pull/6381
- https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
- https://github.com/facebook/proxygen/pull/466
- https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
- https://github.com/micrictor/http2-rst-stream
- https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
- https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
- https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
- https://github.com/h2o/h2o/pull/3291
- https://github.com/nodejs/node/pull/50121
- https://github.com/dotnet/announcements/issues/277
- https://github.com/golang/go/issues/63417
- https://github.com/advisories/GHSA-vx74-f528-fxqg
- https://github.com/apache/trafficserver/pull/10564
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
- https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
- https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
- https://www.openwall.com/lists/oss-security/2023/10/10/6
- https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
- https://github.com/opensearch-project/data-prepper/issues/3474
- https://github.com/kubernetes/kubernetes/pull/121120
- https://github.com/oqtane/oqtane.framework/discussions/3367
- https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
- https://netty.io/news/2023/10/10/4-1-100-Final.html
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
- https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
- https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack