shield Security update for nghttp2

SUSE-SLE-Module-Basesystem-15-SP7-2026-3153

This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).

• Release Date
  Jul 21 2026
• References
  Bugzilla: 1269489
  CVEs: CVE-2026-58055
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libnghttp2_asio-devel
  Development files for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.40.0-150600.25.8.1 lock src

Basesystem Module 15.7 x86_64

• Packages
  libnghttp2_asio-devel
  Development files for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.40.0-150600.25.8.1 lock src

Basesystem Module 15.7 s390x

• Packages
  libnghttp2_asio-devel
  Development files for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.40.0-150600.25.8.1 lock src

Basesystem Module 15.7 ppc64le

• Packages
  libnghttp2_asio-devel
  Development files for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  libnghttp2_asio1
  Shared library for nghttp2

  1.40.0-150600.25.8.1 lock rpm

  nghttp2
  Implementation of Hypertext Transfer Protocol version 2 in C

  1.40.0-150600.25.8.1 lock src