Bug#909591: apache2: CVE-2018-11763: mod_http2, DoS via continuous SETTINGS frames

[Nuno Paquete <nunopaquete@gmail.com>]

Hi Salvatore,

Please help me to unsubscribe these emails, I'm trying for several weeks to do it, but no success.

Many thanks in advance for your support.

Nuno Paquete

A terça, 25/09/2018, 20:28, Salvatore Bonaccorso <carnil@debian.org> escreveu:

Source: apache2
Version: 2.4.25-1
Severity: important
Tags: security upstream

Hi,

The following vulnerability was published for apache2.

CVE-2018-11763[0]:
mod_http2, DoS via continuous SETTINGS frames

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-11763
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11763
[1] https://lists.apache.org/thread.html/d435b0267a76501b9e06c552b20c887171064cde38e46d678da4d3dd@%3Cannounce.httpd.apache.org%3E

Regards,
Salvatore