< back to search

shield Security update for grpc

SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4400

This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821)

Release Date

Dec 20 2024
References

Bugzilla: 1228919, 1233821
CVEs: CVE-2024-7246, CVE-2024-11407
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Public Cloud Module 15.4 s390x

Packages

grpc
HTTP/2-based Remote Procedure Call implementation

1.60.0-150400.8.8.1 lock src

Public Cloud Module 15.4 ppc64le

Packages

grpc
HTTP/2-based Remote Procedure Call implementation

1.60.0-150400.8.8.1 lock src

Public Cloud Module 15.4 aarch64

Packages

grpc
HTTP/2-based Remote Procedure Call implementation

1.60.0-150400.8.8.1 lock src

Public Cloud Module 15.4 x86_64

Packages

grpc
HTTP/2-based Remote Procedure Call implementation

1.60.0-150400.8.8.1 lock src