TI-2026-21585 CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
RHSA-2026:7668
nghttp2 security update
Released 2026-04-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 9) libnghttp2-1.43.0-6.el9_7.1, nghttp2-1.43.0-6.el9_7.1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libnghttp2-devel-1.43.0-6.el9_7.1, nghttp2-1.43.0-6.el9_7.1