Skip to content

[Deepin Integration]~[v25-Release] feat: update nghttp2 to 1.64.0-1.1+deb13u1 by deepin-community-bot[bot]@deepin-community/nghttp2 by deepin-community-ci-bot[bot] #13251

@deepin-bot

Description

@deepin-bot

Package information | 软件包信息

包名 版本
nghttp2 1.64.0-1.1+deb13u1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4008/testing/ ./

Changelog | 更新信息

nghttp2 (1.64.0-1.1+deb13u1) trixie-security; urgency=medium

  • Non-maintainer upload by the Security Team.
  • CVE-2026-27135 (Closes: #1131369)
    Fix missing iframe->state validations to avoid assertion failure.
  • Add test for CVE-2026-27135 (cherry-picked from upstream c619c7b)

Metadata

Metadata

Type

No type

Projects

Status

In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions