-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 16:23:22 +0200
Source: nghttp2
Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym
Architecture: mipsel
Version: 1.52.0-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Lukas Märdian <slyon@debian.org>
Description:
 libnghttp2-14 - library implementing HTTP/2 protocol (shared library)
 libnghttp2-dev - library implementing HTTP/2 protocol (development files)
 nghttp2-client - client implementing HTTP/2 protocol
 nghttp2-proxy - reverse proxy implementing HTTP/2 protocol
 nghttp2-server - server implementing HTTP/2 protocol
Closes: 1131369
Changes:
 nghttp2 (1.52.0-1+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2026-27135 (Closes: #1131369)
     Fix missing iframe->state validations to avoid assertion failure.
   * Add test for CVE-2026-27135 (cherry-picked from upstream c619c7b)
Checksums-Sha1:
 80df3d281ac2ca592f823f8af5947170d11c9738 222836 libnghttp2-14-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 da4d3a2c4ccc1200b3e2503b5dcb87f7b0035c34 69140 libnghttp2-14_1.52.0-1+deb12u3_mipsel.deb
 8d440da9c7a079a5bac389d115c1d84c334da527 112444 libnghttp2-dev_1.52.0-1+deb12u3_mipsel.deb
 9d3ff092c43e41e27c623f72947fb79abb56ce40 1870660 nghttp2-client-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 5c86e886df5ac8a7546bd5e4dca587d401d71936 179272 nghttp2-client_1.52.0-1+deb12u3_mipsel.deb
 c456e45eda99fea96c0f98c7bac1e2cb339ed0c1 5798796 nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 50a79b4047d4b255da8dc927573f4f4ca4f325d0 388496 nghttp2-proxy_1.52.0-1+deb12u3_mipsel.deb
 a5e342eafc7d63b5d83660d7875a62e8245079ab 946312 nghttp2-server-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 f149e013d7d1ea6d61936160ad7e12e23b46af5b 103404 nghttp2-server_1.52.0-1+deb12u3_mipsel.deb
 98e72dd74e7b6e7978b89fe3607c8925ebd0c9a2 8872 nghttp2_1.52.0-1+deb12u3_mipsel-buildd.buildinfo
Checksums-Sha256:
 2ad820bb534ec1f8f9bd0254e60c7c73347f7d6ef4d637384c36f97a0db0498d 222836 libnghttp2-14-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 aaaf58d80a2b7cff3616e085af11bef1bcc139f04ea904b3ef45d4db402f03b2 69140 libnghttp2-14_1.52.0-1+deb12u3_mipsel.deb
 73847fc21ebf4a9417c1fd9bd4888ad4e8c0059d731a670236adda380b20249f 112444 libnghttp2-dev_1.52.0-1+deb12u3_mipsel.deb
 40d0dbfd939429ba1090524c4174489c8da8d6cf983586177197026d6a31d795 1870660 nghttp2-client-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 fc05e9bd1a66b723082f0e5fecac2f353bc2b0077b3f54d28100d13a56c5e716 179272 nghttp2-client_1.52.0-1+deb12u3_mipsel.deb
 5282484077d1d6ce16e814fa4eac296a785eeac33a20b5dfe361dc8e7eb2740b 5798796 nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 a1f3c2149ebd3a6e130b9a54249e137d79144129c637bd4092409a7219fe5678 388496 nghttp2-proxy_1.52.0-1+deb12u3_mipsel.deb
 2c122b86c04dc3c1034c26983d5a394464c55c42ed7901c0756c4fc62cfd6719 946312 nghttp2-server-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 a77873440caa4b733832a4f3805c648c7be97c33d925fdbbca5d97008858b766 103404 nghttp2-server_1.52.0-1+deb12u3_mipsel.deb
 d76b13d2861d76f4214510bafcd989eff53742c5de7bcd5e84c3d22182b7ddfe 8872 nghttp2_1.52.0-1+deb12u3_mipsel-buildd.buildinfo
Files:
 d26858b3ddc411090c1d6f2a8d96fa13 222836 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 23034b21d1ae116e74900a21ccc1b4fb 69140 libs optional libnghttp2-14_1.52.0-1+deb12u3_mipsel.deb
 bda56cbbb8f0cb25f63e036f49fb9b88 112444 libdevel optional libnghttp2-dev_1.52.0-1+deb12u3_mipsel.deb
 60132ca5eb7d6d12d01cef513f7633ee 1870660 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 d595a2591198207a029a6c6201ec8b29 179272 httpd optional nghttp2-client_1.52.0-1+deb12u3_mipsel.deb
 dd107f0bf32e55d0f52f1c846c0351c3 5798796 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 c36f86da1f51961487aa9aea14ec32a4 388496 httpd optional nghttp2-proxy_1.52.0-1+deb12u3_mipsel.deb
 4525c85033f196898cbe1ea5ea762be3 946312 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u3_mipsel.deb
 dad623ead9612b97161e6a742cebe590 103404 httpd optional nghttp2-server_1.52.0-1+deb12u3_mipsel.deb
 21a9238c85cc283ddc085cddc5431366 8872 httpd optional nghttp2_1.52.0-1+deb12u3_mipsel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=iFQf
-----END PGP SIGNATURE-----