[ALSA-2026:54650] Moderate: nghttp2 security update
Type:
security
Severity:
moderate
Release date:
2026-08-14
Description:
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libnghttp2-devel-1.68.0-3.el10_2.2.aarch64.rpm 77bc95780d78803ef8f5f42f580ed80944a66e879c5e8d5d13b8ff88e6d16436
aarch64 nghttp2-1.68.0-3.el10_2.2.aarch64.rpm 8b29c32033ad944724961fffc5ea289292cfb52d55a4251abd2f68dd21658b52
aarch64 libnghttp2-1.68.0-3.el10_2.2.aarch64.rpm f2af23ee3370a9d7a591db25528744ff946dfa3abab58fe897712b5c17a167c7
ppc64le libnghttp2-devel-1.68.0-3.el10_2.2.ppc64le.rpm 54f72ab6591ce2874e90a881a8948929cb21d339eb5a8058a22649ca046d297d
ppc64le libnghttp2-1.68.0-3.el10_2.2.ppc64le.rpm 9617e3219e3405fc0d07c548cc6ee18b0302ee014a5a542695d475d06298f4cf
ppc64le nghttp2-1.68.0-3.el10_2.2.ppc64le.rpm f7140578d2ba612cf83a1be08c7d26b5a1ee7648785e7dac005a4fd5ac83afb1
s390x nghttp2-1.68.0-3.el10_2.2.s390x.rpm 3c04ed2f816665cae1295d0ac1d64dc3d35f9b7d49a674f5cf2c209504dcd3b3
s390x libnghttp2-devel-1.68.0-3.el10_2.2.s390x.rpm 6f0e175704c81bece862b619b32499fad1734e00ee1fe376e5b0238d1bcc3533
s390x libnghttp2-1.68.0-3.el10_2.2.s390x.rpm 7903dc7a5b109228c98fad1ce8aaef320b6454fbf6a4883b08c54bdcf216cfbc
x86_64 libnghttp2-devel-1.68.0-3.el10_2.2.x86_64.rpm 8b4c5dd2716c45ccf9bec2e356a9dee56b781712de596fe4ec248ce63f219ebc
x86_64 libnghttp2-1.68.0-3.el10_2.2.x86_64.rpm 9acfd8297dd6fadeef96e19680891e0dac9fdbeaf8d048f08837c632c89535f9
x86_64 nghttp2-1.68.0-3.el10_2.2.x86_64.rpm e69719b600bcc4cf14a886456985ed9a0cb230d328cf098c016350a0735f9a28
x86_64_v2 libnghttp2-1.68.0-3.el10_2.2.x86_64_v2.rpm 3b75b0b35a113fcbf3e0d897cfad624ad7504f37e23f34ce461162f3eca652d3
x86_64_v2 nghttp2-1.68.0-3.el10_2.2.x86_64_v2.rpm 495afdb3a2a62c55f6de4256a58a58b0184f210a45ec6d6d1dec6fdc0fcfe547
x86_64_v2 libnghttp2-devel-1.68.0-3.el10_2.2.x86_64_v2.rpm ffb6f60b73a88fd960bf5e43fec8113b43305b56bc249bbf5b8ce562336b2778
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.