< back to search

shield Security update for nghttp2
SUSE-SLE-Micro-5.3-2026-2883

This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).

  • Release Date
    Jul 13 2026
  • References
    Bugzilla: 1269489
    CVEs: CVE-2026-58055
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.3 s390x
  • Packages
    libnghttp2-14
    Shared library for nghttp2
    1.40.0-150200.25.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150200.25.1 lock src
SUSE Linux Enterprise Micro 5.3 aarch64
  • Packages
    libnghttp2-14
    Shared library for nghttp2
    1.40.0-150200.25.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150200.25.1 lock src
SUSE Linux Enterprise Micro 5.3 x86_64
  • Packages
    libnghttp2-14
    Shared library for nghttp2
    1.40.0-150200.25.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150200.25.1 lock src