[ol8_codeready_builder] nghttp2-1.33.0-6.el8_10.2.aarch64

Name:	nghttp2
Version:	1.33.0
Release:	6.el8_10.2
Architecture:	aarch64
Group:	Applications/Internet
Size:	1877494
License:	MIT
RPM:	nghttp2-1.33.0-6.el8_10.2.aarch64.rpm
Source RPM:	nghttp2-1.33.0-6.el8_10.2.src.rpm
Build Date:	Mon Apr 13 2026
Build Host:	build-ol8-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://nghttp2.org/
Summary:	Experimental HTTP/2 client, server and proxy
Description:	This package contains the HTTP/2 client, server and proxy programs.

Thu Apr 09 2026 Jan Macku <jamacku@redhat.com> - 1.33.0-6.2

- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)

Wed Apr 10 2024 Jan Macku <jamacku@redhat.com> - 1.33.0-6.1
```
- fix CONTINUATION frames DoS (CVE-2024-27316)
```
Mon Apr 08 2024 Jan Macku <jamacku@redhat.com> - 1.33.0-6
```
- fix CONTINUATION frames DoS (CVE-2024-28182)
```
Fri Oct 13 2023 Jan Macku <jamacku@redhat.com> - 1.33.0-5
```
- fix HTTP/2 Rapid Reset (CVE-2023-44487)
```

Tue Jun 09 2020 Kamil Dudka <kdudka@redhat.com> 1.33.0-4

- prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080)

Wed Aug 28 2019 Kamil Dudka <kdudka@redhat.com> 1.33.0-3
```
- rebuild to trigger gating (#1681044)
```

Mon Aug 19 2019 Kamil Dudka <kdudka@redhat.com> 1.33.0-2

- backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513)

Tue Oct 09 2018 Kamil Dudka <kdudka@redhat.com> 1.33.0-1

- use python3 for build
- update to the latest upstream release (#1636992)

Wed May 09 2018 Kamil Dudka <kdudka@redhat.com> 1.32.0-1
```
- update to the latest upstream release
```

Fri Apr 13 2018 Kamil Dudka <kdudka@redhat.com> 1.31.1-1

- update to the latest upstream release (fixes CVE-2018-1000168)