[ALSA-2026:54662] Moderate: nghttp2 security update
Type:
security
Severity:
moderate
Release date:
2026-08-14
Description:
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libnghttp2-devel-1.43.0-6.el9_8.2.aarch64.rpm 396f2af39fd61bd603035d76fe3f245f4dde01dcdc11b9e3d216942fbf63bd1c
aarch64 libnghttp2-1.43.0-6.el9_8.2.aarch64.rpm 3b5b242a0b2f37fa835fb4792cb8f8806c314f67ff39fff332427252be74f2ed
aarch64 nghttp2-1.43.0-6.el9_8.2.aarch64.rpm edaa91fbc07e2137a7fe6ef8553355c1385fc768769118349bda41110bc3bbf7
i686 libnghttp2-1.43.0-6.el9_8.2.i686.rpm 4d4233b4da8c4a6a8ef4baf42c0802509dc750a5af7ff376f7b440da86e2bb3e
i686 libnghttp2-devel-1.43.0-6.el9_8.2.i686.rpm 6d92f829bbf32835c591f9616f56afebea26f76e7852bfb38d3cee6d5f408f0b
ppc64le nghttp2-1.43.0-6.el9_8.2.ppc64le.rpm 1a2662eb5a11c22f575b24943f6f5aec06d852648d7513d6cf45597c755aee32
ppc64le libnghttp2-1.43.0-6.el9_8.2.ppc64le.rpm 32c391438d3e28f74d167be7448e02d3503543195e2155723b20353b7f813733
ppc64le libnghttp2-devel-1.43.0-6.el9_8.2.ppc64le.rpm 84d969b09fda1d23b44ffd40597463d468b4cccf6c42a11f5e206e30328a3d13
s390x libnghttp2-devel-1.43.0-6.el9_8.2.s390x.rpm 040f10ac5bd6dba132a449d83b77a3a4e8e4edeb3b8dc76daad57a8333a8de99
s390x nghttp2-1.43.0-6.el9_8.2.s390x.rpm 19ddd39e6ff706449df71365379c7109bb024f98b6b6614110c939d715684b6f
s390x libnghttp2-1.43.0-6.el9_8.2.s390x.rpm 903324ba26f178dbc61da5dea7b08d7e729017b90644064b631a1c36812d7df6
x86_64 libnghttp2-devel-1.43.0-6.el9_8.2.x86_64.rpm 7b359242f36661ddb9cbdb367c6c4f2387d6af02b930ba59e26cc9fd98edc18a
x86_64 libnghttp2-1.43.0-6.el9_8.2.x86_64.rpm aea89ed34a5866b687b5170befc44c5f3def3a8e9de38c651785bda28e121a92
x86_64 nghttp2-1.43.0-6.el9_8.2.x86_64.rpm b65ac9136dff99b5c1f5491a0e24f07251d602a233099a069fa1b989efb35adc
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.