[ALSA-2026:7666] Important: nghttp2 security update
Type:
security
Severity:
important
Release date:
2026-04-15
Description:
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nghttp2-1.64.0-2.el10_1.1.aarch64.rpm 11b800fcbdfe815c8604125e68c7c304369b4c38fbb88249de0b41248be059ac
aarch64 libnghttp2-devel-1.64.0-2.el10_1.1.aarch64.rpm 54c2ce7eb1b056530e60d6d3ee6a904e3df7d7918e50d1c6cb6306677ff2b6fb
aarch64 libnghttp2-1.64.0-2.el10_1.1.aarch64.rpm 78ae3aed70220ac0af4d16ccfe38827c55e8b89ceb9e5088b52471b46dbf817c
ppc64le nghttp2-1.64.0-2.el10_1.1.ppc64le.rpm 28ca739eee2ee2513450dd67731ffed9fbefa9759d07a7cd68b62ce2a729c7e4
ppc64le libnghttp2-1.64.0-2.el10_1.1.ppc64le.rpm 73ca214a81cf24495504f5f051088c7ab819082cc9035debf847b61a66afca82
ppc64le libnghttp2-devel-1.64.0-2.el10_1.1.ppc64le.rpm 78b6eaba958776e050984787f2d85eb21a8e6bafecc779af6ec373a4192a3301
s390x libnghttp2-1.64.0-2.el10_1.1.s390x.rpm 0df8af7ab11561752e3a9ec31804a47cba373b38cd92fada074dd3c42904dda2
s390x nghttp2-1.64.0-2.el10_1.1.s390x.rpm 6dc88048f495893c1e49d969ee6f430489a4d6cd6f2b9f78a113ac9ffb20f419
s390x libnghttp2-devel-1.64.0-2.el10_1.1.s390x.rpm bcb570cf1a69fb467080bc99a3d105233ca6b04fff888e40158bbbaba62e3b15
x86_64 nghttp2-1.64.0-2.el10_1.1.x86_64.rpm 4d136e01c5529a9f9a56d91ce80c771ab97d1ddc60f0b4b3ec134a14324a577a
x86_64 libnghttp2-1.64.0-2.el10_1.1.x86_64.rpm 7be1ca206898e84a60f2e953c7100810cdf9760cda88f83e2bb9d4ad246d3c40
x86_64 libnghttp2-devel-1.64.0-2.el10_1.1.x86_64.rpm 850fe65057829861bf0cb23d7aeaacf92a55d77fb2c79e0d37f07865959805ad
x86_64_v2 nghttp2-1.64.0-2.el10_1.1.x86_64_v2.rpm 7aa83e2468d5d67f760dcfb91ad15b02a243957e27cfff49b36d694b59a12a5f
x86_64_v2 libnghttp2-1.64.0-2.el10_1.1.x86_64_v2.rpm 8032790a1bca0f8425c8766201ee0b4b4572e1b2378b978c6bf754374afb8ce1
x86_64_v2 libnghttp2-devel-1.64.0-2.el10_1.1.x86_64_v2.rpm f8ac4f168868dcd60dd04ac2745dd37153630d31771efcb7b9730bb6ee880385
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.