< back to search

gpp_maybe Security update for nghttp2
SUSE-SLE-Module-Basesystem-15-SP7-2026-1350

This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).

  • Release Date
    Apr 15 2026
  • References
    Bugzilla: 1259845
    CVEs: CVE-2026-27135
  • Type
    security
  • Severity
    important

cloud_download Downloads

Basesystem Module 15.7 s390x
  • Packages
    libnghttp2_asio-devel
    Development files for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    libnghttp2_asio1
    Shared library for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150600.25.5.1 lock src
Basesystem Module 15.7 x86_64
  • Packages
    libnghttp2_asio-devel
    Development files for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    libnghttp2_asio1
    Shared library for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150600.25.5.1 lock src
Basesystem Module 15.7 ppc64le
  • Packages
    libnghttp2_asio-devel
    Development files for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    libnghttp2_asio1
    Shared library for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150600.25.5.1 lock src
Basesystem Module 15.7 aarch64
  • Packages
    libnghttp2_asio-devel
    Development files for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    libnghttp2_asio1
    Shared library for nghttp2
    1.40.0-150600.25.5.1 lock rpm
    nghttp2
    Implementation of Hypertext Transfer Protocol version 2 in C
    1.40.0-150600.25.5.1 lock src