Input validation error in nghttp2 - CVE-2024-28182

Vulnerability identifier: #VU88144

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-28182

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to reading the unbounded number of HTTP/2 CONTINUATION frames. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

nghttp2
Oracle Linux
Amazon Linux AMI
Gentoo Linux
Oracle Solaris
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Fedora
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Voice Gateway
SmartFabric Storage Software
Oracle Communications Converged Charging System
Cryostat
Oracle Communications Performance Intelligence Center
Oracle HTTP Server
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core Binding Support Function
Oracle Communications Cloud Native Core Certificate Management
Oracle Communications Cloud Native Core Network Repository Function
Oracle Communications Cloud Native Core Network Exposure Function
Cluster Observability Operator
Multicluster GlobalHub
Migration Toolkit for Runtimes
Service Interconnect
IBM MQ Operator
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift Dev Spaces
Red Hat Advanced Cluster Security for Kubernetes
EasyApache
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
OpenShift Logging
Dell Secure Connect Gateway
Red Hat Migration Toolkit for Applications
IBM Power Hardware Management Console (HMC)
Red Hat OpenStack
IBM Cloud Pak for Business Automation
Oracle Enterprise Communications Broker
IBM Business Automation Manager Open Editions
SmartFabric OS10
webMethods Managed File Transfer
Cloud Pak for Network Automation
Technical Support Appliance
PowerStore X
OpenManage Network Integration (OMNI)
PowerStore T
Enterprise SONiC
Storage Resource Manager
Storage Virtualize
EMC Cloud Tiering Appliance
Dell Data Protection Central
FortiSandbox
Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Unified Data Repository
Oracle Communications Cloud Native Core Console
Oracle Communications Cloud Native Core Security Edge Protection Proxy
FortiSwitch
Dell EMC VxRail Appliance
Juniper Secure Analytics (JSA)
MySQL Cluster
RSA Authentication Manager
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libnghttp2-14 (Ubuntu package)
nghttp2 (Ubuntu package)
nghttp2-client (Ubuntu package)
nghttp2-proxy (Ubuntu package)
nghttp2-server (Ubuntu package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
nghttp2
nghttp2 (Red Hat package)
libnghttp2-devel-doc
libnghttp2-devel
libnghttp2
nghttp2-debugsource
libnghttp2-14
nghttp2-debuginfo
libnghttp2-14-debuginfo
libnghttp2-14-debuginfo-32bit
libnghttp2-14-32bit
libnghttp2_asio-devel
libnghttp2-14-32bit-debuginfo
libnghttp2_asio1-32bit-debuginfo
libnghttp2_asio1
libnghttp2_asio1-debuginfo
nghttp2-python-debugsource
python3-nghttp2
python3-nghttp2-debuginfo
libnghttp2_asio1-32bit
nghttp2-help
jbcs-httpd24-nghttp2 (Red Hat package)
nghttp2-doc
net-libs/nghttp2
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
nodejs-nodemon
jbcs-httpd24-curl (Red Hat package)
npm
nodejs (Red Hat package)
nodejs
nodejs-full-i18n
nodejs-docs
nodejs-devel
nodejs20
nodejs-packaging-bundler
nodejs-packaging
Oracle Communications Session Border Controller
Juniper Junos Space
IBM Application Gateway
JBoss Core Services
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Container Platform for Windows Containers
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM DataPower Gateway
Red Hat OpenShift GitOps
IBM QRadar Network Packet Capture
Dell EMC Storage Monitoring and Reporting (SMR)
IBM Qradar SIEM

Install updates from vendor's website.

nghttp2 - update to 1.61.0
Oracle Solaris - update to 11.4 SRU 71
Voice Gateway - update to 1.0.8.12
SmartFabric Storage Software - update to 1.4.3
FortiSandbox - update to 4.4.6
FortiSwitch - update to 7.4.4
Juniper Secure Analytics (JSA) - update to 7.5.0 UP9 IF02
MySQL Cluster - addressed in versions 8.0.39, 8.4.2
IBM Business Automation Manager Open Editions - update to 9.1.1
Oracle Communications Performance Intelligence Center - update to 10.4.0.4
SmartFabric OS10 - update to 10.5.5.10
IBM Application Gateway - update to 24.09
Juniper Junos Space - update to 24.1R3
libnghttp2-14 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.2, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.2, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2-client (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.2, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2-proxy (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.2, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
nghttp2-server (Ubuntu package) - addressed in versions Ubuntu Pro, 1.40.0-1ubuntu0.3, 1.43.0-1ubuntu0.2, 1.55.1-1ubuntu0.2, 1.59.0-1ubuntu0.1
Cluster Observability Operator - update to 0.4.1
Red Hat OpenShift Serverless - update to 1
Multicluster GlobalHub - update to 1.2.1
Migration Toolkit for Runtimes - update to 1.2.7
OpenShift API for Data Protection (OADP) - update to 1.3.2
jbcs-httpd24-mod_proxy_cluster (Red Hat package) - addressed in versions 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs
Service Interconnect - update to 1.5.4
Network Observability plugin for the Openshift Console - update to 1.6.0
Migration Toolkit for Containers - update to 1.8.4
Red Hat OpenShift GitOps - addressed in versions 1.11.6, 1.12.5, 1.13.1
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.19-37.el7jbcs, 1.15.19-37.el8jbcs
nghttp2 - addressed in versions 1.33.0-1.1.9, 1.59.0-3
nghttp2 - addressed in versions 1.33.0-1.3.el7, 1.52.0-3.fc38, 1.55.1-5.fc39, 1.59.0-3.fc40
nghttp2 (Red Hat package) - addressed in versions 1.33.0-3.el8_2.3, 1.33.0-4.el8_4.2, 1.33.0-4.el8_6.2, 1.33.0-5.el8_8.1, 1.43.0-5.el9_0.3, 1.43.0-5.el9_2.3, 1.43.0-5.el9_4.3
libnghttp2-devel-doc - update to 1.33.0-6.0.1
nghttp2 - addressed in versions 1.33.0-6.0.1, 1.58.0-2
libnghttp2-devel - addressed in versions 1.33.0-6.0.1, 1.58.0-2
libnghttp2 - addressed in versions 1.33.0-6.0.1, 1.58.0-2
nghttp2-debugsource - addressed in versions 1.39.2-3.18.1, 1.40.0-150200.17.1
libnghttp2-devel - addressed in versions 1.39.2-3.18.1, 1.40.0-150200.17.1
libnghttp2-14 - addressed in versions 1.39.2-3.18.1, 1.40.0-150200.17.1
nghttp2-debuginfo - addressed in versions 1.39.2-3.18.1, 1.40.0-150200.17.1
libnghttp2-14-debuginfo - addressed in versions 1.39.2-3.18.1, 1.40.0-150200.17.1
libnghttp2-14-debuginfo-32bit - update to 1.39.2-3.18.1
libnghttp2-14-32bit - addressed in versions 1.39.2-3.18.1, 1.40.0-150200.17.1
libnghttp2_asio-devel - update to 1.40.0-150200.17.1
libnghttp2-14-32bit-debuginfo - update to 1.40.0-150200.17.1
libnghttp2_asio1-32bit-debuginfo - update to 1.40.0-150200.17.1
nghttp2 - update to 1.40.0-150200.17.1
libnghttp2_asio1 - update to 1.40.0-150200.17.1
libnghttp2_asio1-debuginfo - update to 1.40.0-150200.17.1
nghttp2-python-debugsource - update to 1.40.0-150200.17.1
python3-nghttp2 - update to 1.40.0-150200.17.1
python3-nghttp2-debuginfo - update to 1.40.0-150200.17.1
libnghttp2_asio1-32bit - update to 1.40.0-150200.17.1
nghttp2-debuginfo - update to 1.41.0-5
nghttp2-help - update to 1.41.0-5
nghttp2-debugsource - update to 1.41.0-5
libnghttp2-devel - update to 1.41.0-5
libnghttp2 - update to 1.41.0-5
nghttp2 - update to 1.41.0-5
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs
nghttp2-doc - update to 1.58.0-2
net-libs/nghttp2 - update to 1.61.0
nghttp2 - update to 1.61.0
IBM MQ Operator - addressed in versions 2.0.25, 3.2.3, 9.3.0.20-r2, 9.4.0.0-r3
Multicluster Engine for Kubernetes - addressed in versions 2.4.6, 2.7.2
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.4.24-6.el7jbcs, 2.4.24-6.el8jbcs
JBoss Core Services - update to 2.4.57 SP4
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.57-10.el7jbcs, 2.4.57-10.el8jbcs
Cloud Pak for Network Automation - update to 2.7.5
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.7, 2.9.5, 2.10.4, 2.10.5, 2.11.4, 2.12.0, 2.12.1
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs
Technical Support Appliance - update to 3.0.1
nodejs-nodemon - update to 3.0.1-1
PowerStore X - update to 3.2.1.4-2386214
OpenManage Network Integration (OMNI) - update to 3.7
Red Hat OpenShift Dev Spaces - addressed in versions 3.15.0, 3.16.0
PowerStore T - update to 4.0.0.2-2365061
Enterprise SONiC - update to 4.4.1
Red Hat Advanced Cluster Security for Kubernetes - update to 4.5.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.59, 4.12.61, 4.13.45, 4.14.32, 4.14.33, 4.15.18, 4.15.21, 4.16.0, 4.16.15, 4.16.44, 4.17.0
EasyApache - update to 4 2024-4-8
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
App Connect Enterprise Certified Container - addressed in versions 5.0.19, 12.2.0
OpenShift Logging - update to 5.6.21
Dell Secure Connect Gateway - update to 5.24.00.14
Red Hat Migration Toolkit for Applications - update to 6.2.3
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
IBM QRadar Network Packet Capture - update to 7.5.0 Update Package 10
Dell EMC VxRail Appliance - update to 8.0.212
OpenShift Container Platform for Windows Containers - addressed in versions 8.1.3, 10.15.3
Storage Virtualize - addressed in versions 8.4.0.16, 8.5.0.14, 8.6.0.6, 8.7.0.3, 8.7.2.0
RSA Authentication Manager - update to 8.7 SP2 Patch 2
jbcs-httpd24-curl (Red Hat package) - addressed in versions 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP3, 10.3.1060.0 SP1
npm - update to 10.5.0-1.18.20.2.1.0.1
IBM DataPower Gateway - addressed in versions 10.5.0.12, 10.6.0.0
EMC Cloud Tiering Appliance - update to 13.2.0.2.29
Red Hat OpenStack - update to 16.2
nodejs (Red Hat package) - addressed in versions 16.20.2-5.el9_2.3, 16.20.2-8.el9_4, 16.20.2-9.el9_0
nodejs - update to 18.18.2-1
nodejs-full-i18n - update to 18.20.2-1.0.1
nodejs-docs - update to 18.20.2-1.0.1
nodejs - update to 18.20.2-1.0.1
nodejs-devel - update to 18.20.2-1.0.1
Dell Data Protection Central - update to 19.11.0-2
nodejs20 - update to 20.12.2-1
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF035, 24.0.0-IF001
nodejs-packaging-bundler - update to 2021.06-4
nodejs-packaging - update to 2021.06-4

• https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q

• Denial of service in nghttp2
• Fedora 40 update for nghttp2
• Fedora 39 update for nghttp2
• Fedora 38 update for nghttp2
• Fedora EPEL 7 update for nghttp2
• Slackware Linux update for nghttp2
• SUSE update for nghttp2
• SUSE update for nghttp2
• Multiple vulnerabilities in cPanel EasyApache
• openEuler update for nghttp2
• Ubuntu update for nghttp2
• Ubuntu update for nghttp2
• Amazon Linux AMI update for nghttp2
• Red Hat Enterprise Linux 9 update for nodejs
• Red Hat Enterprise Linux 9.2 Extended Update Support update for nodejs
• Red Hat Enterprise Linux 8 update for nghttp2
• Red Hat Enterprise Linux 9.2 Extended Update Support update for nghttp2
• Red Hat Enterprise Linux 8.8 Extended Update Support update for nghttp2
• Red Hat Enterprise Linux 8 update for nghttp2
• Red Hat Enterprise Linux 9.2 Extended Update Support update for the nodejs:18 module
• Red Hat Enterprise Linux 9 update for the nodejs:20 module
• Red Hat Enterprise Linux 8 update for the nodejs:18 module
• Red Hat Enterprise Linux 8 update for the nodejs:20 module
• Red Hat Enterprise Linux 9 update for the nodejs:18 module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions update for nghttp2
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.6
• Multiple vulnerabilities in Red Hat JBoss Core Services Apache HTTP Server 2.4
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Service Interconnect 1.5
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Red Hat Enterprise Linux 9 update for nodejs
• Red Hat Enterprise Linux 8 update for nghttp2
• Multiple vulnerabilities in OpenShift Logging 5.6
• Red Hat Enterprise Linux 8 update for the nodejs:18 module
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.5.0
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat build of Cryostat 3 on RHEL 8
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Red Hat Enterprise Linux 8 update for nghttp2
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in Dell SmartFabric OS10
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Amazon Linux AMI update for nodejs20
• Amazon Linux AMI update for nodejs
• Amazon Linux AMI update for nghttp2
• Gentoo update for nghttp2
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in App Connect Enterprise Certified Container
• Input validation error in IBM DataPower Gateway
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 10.15
• Oracle Solaris update for thrid-party components
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 8.1
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Cluster Observability Operator
• Input validation error in Oracle Communications Performance Intelligence Center
• Multiple vulnerabilities in Oracle Communications Session Border Controller
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Console
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Certificate Management
• Multiple vulnerabilities in Oracle Communications Network Analytics Data Director
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Service Communication Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Repository Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in Oracle Enterprise Communications Broker
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in MySQL Cluster
• Multiple vulnerabilities in IBM QRadar Network Packet Capture
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.9
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in Dell PowerStore X
• Multiple HTTP/2 CONTINUATION frames vulnerabilities in FortiSandbox
• Multiple HTTP/2 CONTINUATION frames vulnerabilities in FortiSwitch
• IBM Technical Support Appliance update for nghttp2
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• IBM Power Hardware Management Console (HMC) update for nghttp2
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Multiple vulnerabilities in Enterprise SONiC Distribution
• Multiple vulnerabilities in Dell PowerStore T Family
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in Multicluster GlobalHub 1.2
• IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products update for nghttp2
• Anolis OS update for nodejs:18 module
• Anolis OS update for nghttp2
• Anolis OS update for nghttp2
• Dell SmartFabric Storage Software update for third-party components
• Junos Space update for third-party components
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• RSA Authentication Manager update for third-party components
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in IBM Application Gateway
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Exposure Function
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Oracle Communications Converged Charging System