-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 15 Apr 2026 16:23:22 +0200
Source: nghttp2
Binary: libnghttp2-14 libnghttp2-14-dbgsym libnghttp2-dev nghttp2-client nghttp2-client-dbgsym nghttp2-proxy nghttp2-proxy-dbgsym nghttp2-server nghttp2-server-dbgsym
Architecture: ppc64el
Version: 1.52.0-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) <buildd_ppc64el-ppc64el-osuosl-02@buildd.debian.org>
Changed-By: Lukas Märdian <slyon@debian.org>
Description:
 libnghttp2-14 - library implementing HTTP/2 protocol (shared library)
 libnghttp2-dev - library implementing HTTP/2 protocol (development files)
 nghttp2-client - client implementing HTTP/2 protocol
 nghttp2-proxy - reverse proxy implementing HTTP/2 protocol
 nghttp2-server - server implementing HTTP/2 protocol
Closes: 1131369
Changes:
 nghttp2 (1.52.0-1+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2026-27135 (Closes: #1131369)
     Fix missing iframe->state validations to avoid assertion failure.
   * Add test for CVE-2026-27135 (cherry-picked from upstream c619c7b)
Checksums-Sha1:
 312215b7a51a3e2ca7038f09a86d9fc4adc715cb 227440 libnghttp2-14-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 9c3098816807e6cfc9d8566ce469e335d74a2e06 80444 libnghttp2-14_1.52.0-1+deb12u3_ppc64el.deb
 14f6175ee39e0b610260214886a6ac98bdff2377 119928 libnghttp2-dev_1.52.0-1+deb12u3_ppc64el.deb
 1356a6d0564353f10265589b915cb8da94f51f19 1914600 nghttp2-client-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 855e46a3733d46739639cf1fe04b717e4cb4c01e 177984 nghttp2-client_1.52.0-1+deb12u3_ppc64el.deb
 5b5716566f8b291ca04d21a55481a64099548783 5843212 nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 ef06bd9c8c9e49c93f7389ab8c5890194b2914bf 406280 nghttp2-proxy_1.52.0-1+deb12u3_ppc64el.deb
 b395a65566b41aa351c7fcc2121f34d9b0751ac1 963924 nghttp2-server-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 016844ecad0a92e65abb024f81d8a7f8cf731e21 106624 nghttp2-server_1.52.0-1+deb12u3_ppc64el.deb
 86d9fb1dd1425f152ae928edc64f9fe7114fe0fa 9124 nghttp2_1.52.0-1+deb12u3_ppc64el-buildd.buildinfo
Checksums-Sha256:
 87299325b92cafd04cf1205b4e00f47cdfb738cab7d8f3615e576d1fe1d14700 227440 libnghttp2-14-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 e3f5b4843c00cdf89c67c03e2ac45c44ff57f39085d2bdf01851a1e78ff66fc7 80444 libnghttp2-14_1.52.0-1+deb12u3_ppc64el.deb
 ca9ec05809727293e89b0d499e92d567d328cdadfafc94c82ccc085ad9745790 119928 libnghttp2-dev_1.52.0-1+deb12u3_ppc64el.deb
 61ae88fc62be7d6d2ed1307043c48b2cebc7b78920d53cf04a15344e23d2f514 1914600 nghttp2-client-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 ca1d3ef6d629d9eb84f5e627e97dd74a240ae4ac8f4813170574e6165a1587b8 177984 nghttp2-client_1.52.0-1+deb12u3_ppc64el.deb
 2d4d459c3e800cce2dfbf00afb31529d95b7c300c3153e298536c171e423f4cb 5843212 nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 4b01e375ac8faae0c0469a39dbf73bd4823e58117ff32d4ad2a2548f1d5ed441 406280 nghttp2-proxy_1.52.0-1+deb12u3_ppc64el.deb
 aa59dc486aba9ed35121160055d53128bdb60c248d302b4a890dc8958f141407 963924 nghttp2-server-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 052a0916734222caf760c22f9fa02fafe559f8fa11b717a111b8223ee2c11cb6 106624 nghttp2-server_1.52.0-1+deb12u3_ppc64el.deb
 688c6bce54da22b7d63d95796ae918abe3ec475a2181b18891ba749efdf60019 9124 nghttp2_1.52.0-1+deb12u3_ppc64el-buildd.buildinfo
Files:
 4f612f0a6f82eca0ef6861d124183c16 227440 debug optional libnghttp2-14-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 6a54fd2385bc2cd7e5303495deaa9c21 80444 libs optional libnghttp2-14_1.52.0-1+deb12u3_ppc64el.deb
 1cc3b220d29b9112c6cde1eb806ec050 119928 libdevel optional libnghttp2-dev_1.52.0-1+deb12u3_ppc64el.deb
 d6ca977412819fa2c5f5059fcbd7059e 1914600 debug optional nghttp2-client-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 f617448b2cafd29522d6610da7318781 177984 httpd optional nghttp2-client_1.52.0-1+deb12u3_ppc64el.deb
 dd281a1628d5b8fed848614c2f46186e 5843212 debug optional nghttp2-proxy-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 cc90b87cbb4cce6787757c5ac03d5e12 406280 httpd optional nghttp2-proxy_1.52.0-1+deb12u3_ppc64el.deb
 943d0755887056a9fbccf3a51f903ab0 963924 debug optional nghttp2-server-dbgsym_1.52.0-1+deb12u3_ppc64el.deb
 93201ad24629053f02e7df314f16cda9 106624 httpd optional nghttp2-server_1.52.0-1+deb12u3_ppc64el.deb
 6188d3dd414f7036607f1c07d6b7e0a3 9124 httpd optional nghttp2_1.52.0-1+deb12u3_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=+1Vw
-----END PGP SIGNATURE-----