nghttp2-1.33.0-6.el8_10.3

エラータID: AXSA:2026-1576:03

リリース日: 
2026/08/19 Wednesday - 16:51
題名: 
nghttp2-1.33.0-6.el8_10.3
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- nghttp2 には、リモートの攻撃者により、HTTP リクエスト
スマグリング攻撃を可能とする脆弱性が存在します。
(CVE-2026-58055)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-58055
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. nghttp2-1.33.0-6.el8_10.3.src.rpm
    MD5: d7ae919c1d0f2f25acb671d78dfe5ca2
    SHA-256: d9a02b50422406722380f9caf68e27bfe60a27e329ab3d41e4412b887d908ee9
    Size: 1.52 MB

Asianux Server 8 for x86_64
  1. libnghttp2-1.33.0-6.el8_10.3.i686.rpm
    MD5: 8667b6a741157aabcf9f7ee2ba0f8799
    SHA-256: ca627975054f710d6020ffad0d034da18fb2e7f022589c117eb50dc340fa6a0b
    Size: 83.84 kB
  2. libnghttp2-1.33.0-6.el8_10.3.x86_64.rpm
    MD5: cea31d943eb4767ab11d2afe24a7129c
    SHA-256: 68c11a2d12560c97c2ac3831b27d926d8eaa25cdc76434ee5cf0ef259fc71764
    Size: 77.44 kB
  3. libnghttp2-devel-1.33.0-6.el8_10.3.i686.rpm
    MD5: 273ba05bac2934324cfb97766c591b45
    SHA-256: 6ac717d373cc6db10837714a8d37575b59975b433ef093d8565f6f046b92d3af
    Size: 60.27 kB
  4. libnghttp2-devel-1.33.0-6.el8_10.3.x86_64.rpm
    MD5: cf9329dfbf1b35e47b740e083fafe117
    SHA-256: 3d816eee349443b5471530ea9a5166ae5d3add8f648aff7ad514cdd7a16e7bcc
    Size: 60.24 kB
  5. nghttp2-1.33.0-6.el8_10.3.x86_64.rpm
    MD5: 7aa165e968f01a3daaf4aea75156cc5d
    SHA-256: d609e9235ce6d22ed27342c2367c08256d0fc2dd84fc650d9597cdf9510b04d1
    Size: 599.02 kB