ELSA-2026-54662

ELSA-2026-54662 - nghttp2 security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-08-13

Description


[1.43.0-6.2]
- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


Related CVEs


CVE-2026-58055

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) nghttp2-1.43.0-6.el9_8.2.src.rpmbbf6c00a79b8e0aa6a7599174f19eba470507aa90a9b53ea2891b489dff2c588-ol9_aarch64_baseos_latest
nghttp2-1.43.0-6.el9_8.2.src.rpmbbf6c00a79b8e0aa6a7599174f19eba470507aa90a9b53ea2891b489dff2c588-ol9_aarch64_codeready_builder
nghttp2-1.43.0-6.el9_8.2.src.rpmbbf6c00a79b8e0aa6a7599174f19eba470507aa90a9b53ea2891b489dff2c588-ol9_aarch64_u8_baseos_patch
libnghttp2-1.43.0-6.el9_8.2.aarch64.rpmbd185ec2ac90f50f16fe189a7ef2a833c90f52d45b213da77cfebd7eb7b8cbe0-ol9_aarch64_baseos_latest
libnghttp2-1.43.0-6.el9_8.2.aarch64.rpmbd185ec2ac90f50f16fe189a7ef2a833c90f52d45b213da77cfebd7eb7b8cbe0-ol9_aarch64_u8_baseos_patch
libnghttp2-devel-1.43.0-6.el9_8.2.aarch64.rpmaef5b88d32525036beb8754daa32accbee8f2fdbbfb739d4e2bff45da1068ba4-ol9_aarch64_codeready_builder
nghttp2-1.43.0-6.el9_8.2.aarch64.rpm07666aa8a2deb56301bd475f89686e5d6e756003668850d1b4c99063d1af6abd-ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64) nghttp2-1.43.0-6.el9_8.2.src.rpmbbf6c00a79b8e0aa6a7599174f19eba470507aa90a9b53ea2891b489dff2c588-ol9_x86_64_baseos_latest
nghttp2-1.43.0-6.el9_8.2.src.rpmbbf6c00a79b8e0aa6a7599174f19eba470507aa90a9b53ea2891b489dff2c588-ol9_x86_64_codeready_builder
nghttp2-1.43.0-6.el9_8.2.src.rpmbbf6c00a79b8e0aa6a7599174f19eba470507aa90a9b53ea2891b489dff2c588-ol9_x86_64_u8_baseos_patch
libnghttp2-1.43.0-6.el9_8.2.i686.rpm447560049c4f75d6526a7d5292ce56ebd48edd6d1aa0ed0662d44f904a87db39-ol9_x86_64_baseos_latest
libnghttp2-1.43.0-6.el9_8.2.i686.rpm447560049c4f75d6526a7d5292ce56ebd48edd6d1aa0ed0662d44f904a87db39-ol9_x86_64_u8_baseos_patch
libnghttp2-1.43.0-6.el9_8.2.x86_64.rpmc9371e2b2cc6e6ce6266cbd4707b022aac151de8346b83896f66700a0f86d1d1-ol9_x86_64_baseos_latest
libnghttp2-1.43.0-6.el9_8.2.x86_64.rpmc9371e2b2cc6e6ce6266cbd4707b022aac151de8346b83896f66700a0f86d1d1-ol9_x86_64_u8_baseos_patch
libnghttp2-devel-1.43.0-6.el9_8.2.i686.rpmd38ebd6c7859b3e5ba70dc83f3ca1e83fb43edd44879c38116b7d23468d051f0-ol9_x86_64_codeready_builder
libnghttp2-devel-1.43.0-6.el9_8.2.x86_64.rpm24217faf0b6d92f7eed4ac2526a8475b172056ced938beb07fac5273269b0eec-ol9_x86_64_codeready_builder
nghttp2-1.43.0-6.el9_8.2.x86_64.rpmfe664f1f8d09c93d383f7dba9ad8f975d0ff6c012824c19f7acc936b06000ddf-ol9_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete