-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 16:23:22 +0200
Source: nghttp2
Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym
Architecture: mips64el
Version: 1.52.0-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-03) <buildd_mips64el-mipsel-osuosl-03@buildd.debian.org>
Changed-By: Lukas Märdian <slyon@debian.org>
Description:
 libnghttp2-14 - library implementing HTTP/2 protocol (shared library)
 libnghttp2-dev - library implementing HTTP/2 protocol (development files)
 nghttp2-client - client implementing HTTP/2 protocol
 nghttp2-proxy - reverse proxy implementing HTTP/2 protocol
 nghttp2-server - server implementing HTTP/2 protocol
Closes: 1131369
Changes:
 nghttp2 (1.52.0-1+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2026-27135 (Closes: #1131369)
     Fix missing iframe->state validations to avoid assertion failure.
   * Add test for CVE-2026-27135 (cherry-picked from upstream c619c7b)
Checksums-Sha1:
 14cefbf02b235ea53265f111b8a3dadb054be764 229200 libnghttp2-14-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 6d32e428a8e321e8ea205c5ce07e3ed9a80caf72 67828 libnghttp2-14_1.52.0-1+deb12u3_mips64el.deb
 dfeef8d1226d5ee85b0ff5c91403df1ccc3a47ab 112764 libnghttp2-dev_1.52.0-1+deb12u3_mips64el.deb
 7fe682f046b591a78c62fbfc5fc5da8325f2f663 1903576 nghttp2-client-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 fe6d5c1bcb824400c239eb09f5fb19b7bbd426b0 178184 nghttp2-client_1.52.0-1+deb12u3_mips64el.deb
 909639b9eab4fc4b8b2fec5f82da71a69d59247d 5854304 nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 e0f34f143b4d5abbd745e6a5e0106ea213dfe926 385608 nghttp2-proxy_1.52.0-1+deb12u3_mips64el.deb
 63a55c9cbb8fa47dac2dff58dc3fd03e60c85c94 959848 nghttp2-server-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 a08c79c424b4f2eb3b5a5afe764dff4defe975bb 103432 nghttp2-server_1.52.0-1+deb12u3_mips64el.deb
 e670089bcb249394141493b3d9b56506e012c859 8937 nghttp2_1.52.0-1+deb12u3_mips64el-buildd.buildinfo
Checksums-Sha256:
 04b2c2b5748971934f470e80215e3adee658d30013f0d3feb78012bb63c3d3d4 229200 libnghttp2-14-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 6896d6258d128e14e6bd0aa32a894c390d3ed011383686eebab9434acab88eb2 67828 libnghttp2-14_1.52.0-1+deb12u3_mips64el.deb
 8b7cf9c3ee1235b2aaabe8e07ccb0220ad6a9fbe1eabe95e4738b26bebd722dc 112764 libnghttp2-dev_1.52.0-1+deb12u3_mips64el.deb
 643cd2e2224fa54c9d0aa402037b68fe4b6cc75e50bc43f406d4e1a93247c8eb 1903576 nghttp2-client-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 2805867f78569664ec94bee55909afae340342024ca68391e6d0073ac4d7e816 178184 nghttp2-client_1.52.0-1+deb12u3_mips64el.deb
 44c2a1ae0addb34b7d22b977a9feca1f0c8a23472f33bee91c0ab81494c1612f 5854304 nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 c1c458a4f48f22bb4034e8d29688c99f894e64258631b8f2263db880de0a2153 385608 nghttp2-proxy_1.52.0-1+deb12u3_mips64el.deb
 47b5052d1d0459a5138f2410e723a499bce5d5ff7b5bcc0bbc3bd8ec1395da06 959848 nghttp2-server-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 cc6525b5ecb9e234377c2a9981faef3b2653f52296ab0775be255e3a6962d9cb 103432 nghttp2-server_1.52.0-1+deb12u3_mips64el.deb
 26bb66950d687ac04ded9b526937fcc415c5768c94d089c80ec6eca84cbdb4f3 8937 nghttp2_1.52.0-1+deb12u3_mips64el-buildd.buildinfo
Files:
 a35a4dc2aa8ed351915de1c76dfc812b 229200 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 971b938901d6ec60f9b4aeab198da25d 67828 libs optional libnghttp2-14_1.52.0-1+deb12u3_mips64el.deb
 6eac76085e96098b3c84858d0e8af7bd 112764 libdevel optional libnghttp2-dev_1.52.0-1+deb12u3_mips64el.deb
 48228753c4096f3a38adc5c050c98acf 1903576 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 ae992d062b32858a415be8c4b8284ea8 178184 httpd optional nghttp2-client_1.52.0-1+deb12u3_mips64el.deb
 02f2c653dfb2ea7b1cca4ec2701bb971 5854304 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 6c28ce5465579f08d05b5de7c5fda0ab 385608 httpd optional nghttp2-proxy_1.52.0-1+deb12u3_mips64el.deb
 2613bcf8332d9aa929f6665084621e8e 959848 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u3_mips64el.deb
 c5ea669ed0e009b0225cc9afe974b1a7 103432 httpd optional nghttp2-server_1.52.0-1+deb12u3_mips64el.deb
 bff88142edbfa7c604f7490674cccf13 8937 httpd optional nghttp2_1.52.0-1+deb12u3_mips64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmoEbswACgkQ/qmHKZss
fSC+ug/+IGhjrqtQgdTb9iEl6iqvCvlHtGWNnSPmST8wrbBvTyGCZv3GfaJxw7gB
3Y+ZpXQrmoTRm1eMilWKF8yCqjbtv3Q0vq0H0Xxml0R5UEePnKprdOvPrHy3kTl/
6yJe3dvIhqiKlfbzAyFdeGsl3CLIbDdiBYK7aHCQxKFnSdVQxyE+Ml6280NQnHBn
MrxQGo24i51C6yIExEaXnfYTBZdmhz5rnTokbpqBAdSIGJZBKul9r8EvZoaPfzQc
0XaaZQJWWwgBtTKU1UE+izPzHF9yNvVHUHyhxEsROkaUKQ75SGoNO+Av85oyzXPw
nscPJSdmhgU0bInQ45VlZ/pd06we5UjXact1+G37Nuyd7q4817eZzpa+vG7j0xST
4nK9xEGC3MlmV/whe7q+Y5M5qCh894DwK2ax9x97QAEiyL6AO6EEOFb4zCJxMUv5
+q8ztduw/S21q8zMuh5yLowm2ZrgsZ52DwZ5AyxUHlwJaCxg0ped3vTeDH2q4lsW
/U2yTYLTKHyxJ3V1K19JYDimMZ59u4J6fBZgn1q9ml6C44lMwExlHI3cRtUXS0AM
C6qW/t6GH7442YESqfsb1kX0D1twkdiVqTIP6Joar1ZfklJbwrklOGEf3kAAASad
aixS+ZZx79CTU2HyVN1UDr5SwEAitiYcZdlvSKrj0ogzb8p2Z9Q=
=2Pmu
-----END PGP SIGNATURE-----