ELSA-2026-55804

ELSA-2026-55804 - nghttp2 security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-08-18

Description


[1.33.0-6.3]
- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)


Related CVEs


CVE-2026-58055

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nghttp2-1.33.0-6.el8_10.3.src.rpm29aa2974dcc12a97f44c7474bacad5f7cd65045890c1ee85e9bc4359f0ede349-ol8_aarch64_baseos_latest
nghttp2-1.33.0-6.el8_10.3.src.rpm29aa2974dcc12a97f44c7474bacad5f7cd65045890c1ee85e9bc4359f0ede349-ol8_aarch64_codeready_builder
nghttp2-1.33.0-6.el8_10.3.src.rpm29aa2974dcc12a97f44c7474bacad5f7cd65045890c1ee85e9bc4359f0ede349-ol8_aarch64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.3.aarch64.rpm3ea5d92821ddf18acac1b2cc51d9b5bc7d40004edb60eb12ddfb05ab02889cab-ol8_aarch64_baseos_latest
libnghttp2-1.33.0-6.el8_10.3.aarch64.rpm3ea5d92821ddf18acac1b2cc51d9b5bc7d40004edb60eb12ddfb05ab02889cab-ol8_aarch64_u10_baseos_patch
libnghttp2-devel-1.33.0-6.el8_10.3.aarch64.rpm322534ae577cbfce4f42a2e3512b3381bf6551b06278abc17e75e1e315e6aebc-ol8_aarch64_codeready_builder
nghttp2-1.33.0-6.el8_10.3.aarch64.rpmd5e5560f7e7a2c9abc1d091f756680ba7d45b4ae4aa408ef80182e7ec31aae94-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) nghttp2-1.33.0-6.el8_10.3.src.rpm29aa2974dcc12a97f44c7474bacad5f7cd65045890c1ee85e9bc4359f0ede349-ol8_x86_64_baseos_latest
nghttp2-1.33.0-6.el8_10.3.src.rpm29aa2974dcc12a97f44c7474bacad5f7cd65045890c1ee85e9bc4359f0ede349-ol8_x86_64_codeready_builder
nghttp2-1.33.0-6.el8_10.3.src.rpm29aa2974dcc12a97f44c7474bacad5f7cd65045890c1ee85e9bc4359f0ede349-ol8_x86_64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.3.i686.rpmc8f9c1b7876778b3b9e8db4a49e496fe96e269cceda081fa2209bbb0617e7418-ol8_x86_64_baseos_latest
libnghttp2-1.33.0-6.el8_10.3.i686.rpmc8f9c1b7876778b3b9e8db4a49e496fe96e269cceda081fa2209bbb0617e7418-ol8_x86_64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.3.x86_64.rpm8be83b85545c1509d8189ebe4d888d0ecf6a79c9f82241bb5ffa5165beafed2b-ol8_x86_64_baseos_latest
libnghttp2-1.33.0-6.el8_10.3.x86_64.rpm8be83b85545c1509d8189ebe4d888d0ecf6a79c9f82241bb5ffa5165beafed2b-ol8_x86_64_u10_baseos_patch
libnghttp2-devel-1.33.0-6.el8_10.3.i686.rpmf489bd6ffc162d23b0aab3e180a912baeb9910dc0527459d1d7d16fac739a03b-ol8_x86_64_codeready_builder
libnghttp2-devel-1.33.0-6.el8_10.3.x86_64.rpmb1d4baa8b2f64a5356bc387e2b26340024b6c5643d7aa2ce014c556af5eb5e66-ol8_x86_64_codeready_builder
nghttp2-1.33.0-6.el8_10.3.x86_64.rpm736d27659c995c2ff7e6a99e239dcc896e44d633aeea86473af853da96ab531f-ol8_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete