ELSA-2026-7667

ELSA-2026-7667 - nghttp2 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-04-13

Description


[1.33.0-6.2]
- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)


Related CVEs


CVE-2026-27135

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) nghttp2-1.33.0-6.el8_10.2.src.rpmeafc969fe896c2b26409002acf1067a7f84d4192dcf4e1454aebdd98c92c1c56-ol8_aarch64_baseos_latest
nghttp2-1.33.0-6.el8_10.2.src.rpmeafc969fe896c2b26409002acf1067a7f84d4192dcf4e1454aebdd98c92c1c56-ol8_aarch64_codeready_builder
nghttp2-1.33.0-6.el8_10.2.src.rpmeafc969fe896c2b26409002acf1067a7f84d4192dcf4e1454aebdd98c92c1c56-ol8_aarch64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.2.aarch64.rpm82a20ec87286ba90ff8d87ca9fc5a11387773b8ecacd1af6302226b4d774930e-ol8_aarch64_baseos_latest
libnghttp2-1.33.0-6.el8_10.2.aarch64.rpm82a20ec87286ba90ff8d87ca9fc5a11387773b8ecacd1af6302226b4d774930e-ol8_aarch64_u10_baseos_patch
libnghttp2-devel-1.33.0-6.el8_10.2.aarch64.rpm37051f5847318e2fe9a472b10951586faeb3c2c9c325f8690ada0c5f438434e8-ol8_aarch64_codeready_builder
nghttp2-1.33.0-6.el8_10.2.aarch64.rpm5fe3ea09bb64f12bcd6029fcd619d369e51455688c4314df1cc778eeb282fdf3-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) nghttp2-1.33.0-6.el8_10.2.src.rpmeafc969fe896c2b26409002acf1067a7f84d4192dcf4e1454aebdd98c92c1c56-ol8_x86_64_baseos_latest
nghttp2-1.33.0-6.el8_10.2.src.rpmeafc969fe896c2b26409002acf1067a7f84d4192dcf4e1454aebdd98c92c1c56-ol8_x86_64_codeready_builder
nghttp2-1.33.0-6.el8_10.2.src.rpmeafc969fe896c2b26409002acf1067a7f84d4192dcf4e1454aebdd98c92c1c56-ol8_x86_64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.2.i686.rpmdd5786a890352c048927316ead0c61264f9af5f960f25e1a878c7e328940d2d2-ol8_x86_64_baseos_latest
libnghttp2-1.33.0-6.el8_10.2.i686.rpmdd5786a890352c048927316ead0c61264f9af5f960f25e1a878c7e328940d2d2-ol8_x86_64_u10_baseos_patch
libnghttp2-1.33.0-6.el8_10.2.x86_64.rpm147fb8ae542bbd89268d25f360ca378fc8e3f3e83adb0e02d1b40115ffef7dde-ol8_x86_64_baseos_latest
libnghttp2-1.33.0-6.el8_10.2.x86_64.rpm147fb8ae542bbd89268d25f360ca378fc8e3f3e83adb0e02d1b40115ffef7dde-ol8_x86_64_u10_baseos_patch
libnghttp2-devel-1.33.0-6.el8_10.2.i686.rpm7d5b6635dad9aa09935e530ee5e937ebf30dfc600263c46405edd9c45c6476f2-ol8_x86_64_codeready_builder
libnghttp2-devel-1.33.0-6.el8_10.2.x86_64.rpm6337e48a4e8118a66487bdbd334554438e4d6d2aedc68867986952b9e56b3b4d-ol8_x86_64_codeready_builder
nghttp2-1.33.0-6.el8_10.2.x86_64.rpm63280f40aad63e3a439dc478aeb1da10d7b8f4db932d77ab4683d2ab29caeb58-ol8_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete