An update is available for nghttp2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
libnghttp2-0:1.33.0-6.el8_10.2.aarch64.rpm
libnghttp2-0:1.33.0-6.el8_10.2.i686.rpm
libnghttp2-0:1.33.0-6.el8_10.2.x86_64.rpm
libnghttp2-debuginfo-0:1.33.0-6.el8_10.2.aarch64.rpm
libnghttp2-debuginfo-0:1.33.0-6.el8_10.2.i686.rpm
libnghttp2-debuginfo-0:1.33.0-6.el8_10.2.x86_64.rpm
libnghttp2-devel-0:1.33.0-6.el8_10.2.aarch64.rpm
libnghttp2-devel-0:1.33.0-6.el8_10.2.i686.rpm
libnghttp2-devel-0:1.33.0-6.el8_10.2.x86_64.rpm
nghttp2-0:1.33.0-6.el8_10.2.aarch64.rpm
nghttp2-0:1.33.0-6.el8_10.2.src.rpm
nghttp2-0:1.33.0-6.el8_10.2.x86_64.rpm
nghttp2-debuginfo-0:1.33.0-6.el8_10.2.aarch64.rpm
nghttp2-debuginfo-0:1.33.0-6.el8_10.2.i686.rpm
nghttp2-debuginfo-0:1.33.0-6.el8_10.2.x86_64.rpm
nghttp2-debugsource-0:1.33.0-6.el8_10.2.aarch64.rpm
nghttp2-debugsource-0:1.33.0-6.el8_10.2.i686.rpm
nghttp2-debugsource-0:1.33.0-6.el8_10.2.x86_64.rpm
No references
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135
https://bugzilla.redhat.com/show_bug.cgi?id=2448754
Get the latest Linux and open source security news straight to your inbox.