< back to search

shield Security update for python-grpcio

SUSE-SLE-Module-Public-Cloud-15-SP6-2024-4393

This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919)

Release Date

Dec 20 2024
References

Bugzilla: 1233821, 1228919
CVEs: CVE-2024-7246, CVE-2024-11407
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Public Cloud Module 15.6 aarch64

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock rpm

Public Cloud Module 15.6 ppc64le

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock rpm

Public Cloud Module 15.6 s390x

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock rpm

Public Cloud Module 15.6 x86_64

Packages

python-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock src

python311-grpcio
HTTP/2-based Remote Procedure Call implementation

1.60.1-150600.16.8.1 lock rpm