SUSE-SU-2024:4400-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:4400-1

Related

Published

2024-12-20T15:27:37Z

Modified

2024-12-20T15:27:37Z

Summary

Security update for grpc

Details

This update for grpc fixes the following issues:

CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919)
CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821)

References

Affected packages

Name: grpc
Purl: pkg:rpm/suse/grpc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.60.0-150400.8.8.1

{
    "binaries": [
        {}
    ]
}