< back to search

shield Security update for python-grpcio

SUSE-SLE-Module-Public-Cloud-15-SP4-2024-4428

This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919)

Release Date

Dec 27 2024
References

Bugzilla: 1228919, 1233821
CVEs: CVE-2024-11407, CVE-2024-7246
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Public Cloud Module 15.4 s390x

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock rpm

Public Cloud Module 15.4 aarch64

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock rpm

Public Cloud Module 15.4 ppc64le

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock rpm

Public Cloud Module 15.4 x86_64

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150400.9.10.1 lock rpm