[Apollo] Advisories Statistics light light Login

RLSA-2026:54662

Security Mirrored from RHSA-2026:54662
Issued at: 2026-08-14
Updated at: 2026-08-16

Advisory content derived from Red Hat RHSA-2026:54662, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Moderate: nghttp2 security update



Description

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2493954

CVEs

CVE-2026-58055

Affected packages

Rocky Linux 9 aarch64 - BaseOS

libnghttp2-0:1.43.0-6.el9_8.2.aarch64.rpm libnghttp2-debuginfo-0:1.43.0-6.el9_8.2.aarch64.rpm nghttp2-0:1.43.0-6.el9_8.2.src.rpm nghttp2-debuginfo-0:1.43.0-6.el9_8.2.aarch64.rpm nghttp2-debugsource-0:1.43.0-6.el9_8.2.aarch64.rpm

Rocky Linux 9 x86_64 - BaseOS

libnghttp2-0:1.43.0-6.el9_8.2.i686.rpm libnghttp2-0:1.43.0-6.el9_8.2.x86_64.rpm libnghttp2-debuginfo-0:1.43.0-6.el9_8.2.i686.rpm libnghttp2-debuginfo-0:1.43.0-6.el9_8.2.x86_64.rpm nghttp2-0:1.43.0-6.el9_8.2.src.rpm nghttp2-debuginfo-0:1.43.0-6.el9_8.2.i686.rpm nghttp2-debuginfo-0:1.43.0-6.el9_8.2.x86_64.rpm nghttp2-debugsource-0:1.43.0-6.el9_8.2.i686.rpm nghttp2-debugsource-0:1.43.0-6.el9_8.2.x86_64.rpm

Rocky Linux 9 ppc64le - BaseOS

libnghttp2-0:1.43.0-6.el9_8.2.ppc64le.rpm libnghttp2-debuginfo-0:1.43.0-6.el9_8.2.ppc64le.rpm nghttp2-0:1.43.0-6.el9_8.2.src.rpm nghttp2-debuginfo-0:1.43.0-6.el9_8.2.ppc64le.rpm nghttp2-debugsource-0:1.43.0-6.el9_8.2.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

libnghttp2-0:1.43.0-6.el9_8.2.s390x.rpm libnghttp2-debuginfo-0:1.43.0-6.el9_8.2.s390x.rpm nghttp2-0:1.43.0-6.el9_8.2.src.rpm nghttp2-debuginfo-0:1.43.0-6.el9_8.2.s390x.rpm nghttp2-debugsource-0:1.43.0-6.el9_8.2.s390x.rpm

Rocky Linux 9 aarch64 - CRB

libnghttp2-devel-0:1.43.0-6.el9_8.2.aarch64.rpm nghttp2-0:1.43.0-6.el9_8.2.aarch64.rpm

Rocky Linux 9 x86_64 - CRB

libnghttp2-devel-0:1.43.0-6.el9_8.2.i686.rpm libnghttp2-devel-0:1.43.0-6.el9_8.2.x86_64.rpm nghttp2-0:1.43.0-6.el9_8.2.x86_64.rpm

Rocky Linux 9 ppc64le - CRB

libnghttp2-devel-0:1.43.0-6.el9_8.2.ppc64le.rpm nghttp2-0:1.43.0-6.el9_8.2.ppc64le.rpm

Rocky Linux 9 s390x - CRB

libnghttp2-devel-0:1.43.0-6.el9_8.2.s390x.rpm nghttp2-0:1.43.0-6.el9_8.2.s390x.rpm