nghttp2-1.43.0-6.el9_8.2

エラータID: AXSA:2026-1622:04

リリース日: 
2026/08/23 Sunday - 13:45
題名: 
nghttp2-1.43.0-6.el9_8.2
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- nghttp2 には、リモートの攻撃者により、HTTP リクエスト
スマグリング攻撃を可能とする脆弱性が存在します。
(CVE-2026-58055)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-58055
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. nghttp2-1.43.0-6.el9_8.2.src.rpm
    MD5: d66094d181e26adfa502788271163572
    SHA-256: 510bc36fc72fa44148106da08f107a37cab9db0636fa374c59d49d93ce3b88bd
    Size: 3.82 MB

Asianux Server 9 for x86_64
  1. libnghttp2-1.43.0-6.el9_8.2.i686.rpm
    MD5: 4655c5f071f01aa9a654b822b8fe0101
    SHA-256: 50e8d9ade131cf6b1760b8c29623cc18e96ce0253393c3509d5f14fce70e4271
    Size: 78.20 kB
  2. libnghttp2-1.43.0-6.el9_8.2.x86_64.rpm
    MD5: 959f6c9a0a9a0909de69c446551daa26
    SHA-256: 74f9f06f27c9c9ef8b85e62a7232717650d4bf5481b39a0f7a7d0eeccac00edb
    Size: 72.25 kB
  3. libnghttp2-devel-1.43.0-6.el9_8.2.i686.rpm
    MD5: ddc5e970b9859d0b21b1eaccf319eca4
    SHA-256: a50c9c5ce931a22ba6f2ece433070487990a86fb3ffe2c2af1befe8abfbbdbb1
    Size: 51.98 kB
  4. libnghttp2-devel-1.43.0-6.el9_8.2.x86_64.rpm
    MD5: cea6b2d58986b079fe7b2f8f0851ed22
    SHA-256: 1162d65d9033340b8acbc14ef32c119164087e894c6e7353dfea2c0566168842
    Size: 51.95 kB
  5. nghttp2-1.43.0-6.el9_8.2.x86_64.rpm
    MD5: 5a8993907fb67727db2658b1d6720af6
    SHA-256: 55040a6959b1df9d65988f4a3f80b2a0ceee69524d2034fbab4d0cb354c934e9
    Size: 571.60 kB