[ALSA-2026:55804] Moderate: nghttp2 security update
Type:
security
Severity:
moderate
Release date:
2026-08-18
Description:
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libnghttp2-1.33.0-6.el8_10.3.aarch64.rpm 55059d32846ff525d4e42a0c722b7f1978710c1eb42abb644e7df55be51615ba
aarch64 libnghttp2-devel-1.33.0-6.el8_10.3.aarch64.rpm 70386a38339d9c1616393073c1c65efecc385f6d7aeac365c0cbd74a6b695346
aarch64 nghttp2-1.33.0-6.el8_10.3.aarch64.rpm 8255858fb9fe904ea42134a778e2cceea6ae3705f3228bf442a18bff80e2682f
i686 libnghttp2-devel-1.33.0-6.el8_10.3.i686.rpm 43b39f6ac915d01bf196a6159329e70cfcc0dae12fb46a81a706d2a24b9c33c4
i686 libnghttp2-1.33.0-6.el8_10.3.i686.rpm 96d4ce3caa1748fb1dfaf031e6a13914359f0b815be78ae86d9d985a77107799
ppc64le libnghttp2-devel-1.33.0-6.el8_10.3.ppc64le.rpm 41d6174c6f6a7ceb4110006355912eebf2d5e65c0a5b724bc20ca33ea5ca25cc
ppc64le libnghttp2-1.33.0-6.el8_10.3.ppc64le.rpm 5b3e2fd6dda00b1a9511dd70e6bd86e5ef01337c95317076d49263eb85ad525b
ppc64le nghttp2-1.33.0-6.el8_10.3.ppc64le.rpm 769fceb675ac8ed6befe9d71d1ff97b0ccf50e19a1f039e565dcb618698b6271
s390x nghttp2-1.33.0-6.el8_10.3.s390x.rpm 86d867e64d96e4373338f77e66acabdb9c6973032142fe326464622ca692f368
s390x libnghttp2-devel-1.33.0-6.el8_10.3.s390x.rpm afec64799ffb98b5341bf97c1e6f41bbe84c95c3f9b1feab344fb45e510c152d
s390x libnghttp2-1.33.0-6.el8_10.3.s390x.rpm ca69f4ce913550cae01f7acf0b9f6434dcd18e63809f7d88cc22090976abd9f2
x86_64 nghttp2-1.33.0-6.el8_10.3.x86_64.rpm 51ee1dcbd5c9534a6c3777709b50a5e1cd8e7d2ad25af2d138b9c99176ac3a84
x86_64 libnghttp2-devel-1.33.0-6.el8_10.3.x86_64.rpm 835d9887b352e653734a4e68ecf63e435cf72fa6c21ac0e316f3fb0e64e48ac0
x86_64 libnghttp2-1.33.0-6.el8_10.3.x86_64.rpm fd59f1aa18f3e60304fde4f71c959fbc22c82c86c136fea775276dd55419b609
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.