RHSA-2026:35454
RHSA-2026:35454 · Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
CVSS 5.4 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
libnghttp2 Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.69.0-3.1.hum1
Update to 0:1.69.0-3.1.hum1
libnghttp2-devel Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.69.0-3.1.hum1
Update to 0:1.69.0-3.1.hum1
mingw32-libnghttp2 Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.69.0-3.1.hum1
Update to 0:1.69.0-3.1.hum1
mingw64-libnghttp2 Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.69.0-3.1.hum1
Update to 0:1.69.0-3.1.hum1
nghttp2 Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.69.0-3.1.hum1
Update to 0:1.69.0-3.1.hum1
Original sources
- https://access.redhat.com/errata/RHSA-2026:35454
- https://access.redhat.com/security/cve/CVE-2026-58055
- https://access.redhat.com/security/updates/classification/
- https://images.redhat.com/
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35454.json
- https://bugzilla.redhat.com/show_bug.cgi?id=2493954
- https://www.cve.org/CVERecord?id=CVE-2026-58055
- https://nvd.nist.gov/vuln/detail/CVE-2026-58055
- https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc
- https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e
- https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length
- https://osv.dev/vulnerability/RHSA-2026:35454