Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
Each line is one product that two or more sources describe differently. Same identifier means they both named it the same way; linked identifier means they named it differently and meet at a package URL or CPE both assert. This is recorded rather than resolved: a vendor saying "not affected" where an ecosystem says "affected" is a fact about the disclosure, and flattening it would hide the more useful half.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.src jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.src | vendor fix → jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.src (RHSA-2026:27200) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.x86_64 jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-nghttp2-0:1.64.0-3.el7jbcs.x86_64 (RHSA-2026:27200) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.src jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.src | vendor fix → jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.src (RHSA-2026:27200) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.x86_64 jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-nghttp2-0:1.64.0-3.el8jbcs.x86_64 (RHSA-2026:27200) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el7jbcs.x86_64 jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el7jbcs.x86_64 (RHSA-2026:27200) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el8jbcs.x86_64 jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-nghttp2-debuginfo-0:1.64.0-3.el8jbcs.x86_64 (RHSA-2026:27200) | csaf_redhat | |
| 7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el7jbcs.x86_64 jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server | fixed | jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el7jbcs.x86_64 | vendor fix → jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el7jbcs.x86_64 (RHSA-2026:27200) | csaf_redhat | |
| 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el8jbcs.x86_64 jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8 | fixed | jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el8jbcs.x86_64 | vendor fix → jbcs-httpd24-nghttp2-devel-0:1.64.0-3.el8jbcs.x86_64 (RHSA-2026:27200) | csaf_redhat | |
| BaseOS-8.2.0.Z.AUS:libnghttp2-0:1.33.0-3.el8_2.4.i686 libnghttp2-0:1.33.0-3.el8_2.4.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | fixed | libnghttp2-0:1.33.0-3.el8_2.4.i686 | vendor fix → libnghttp2-0:1.33.0-3.el8_2.4.i686 (RHSA-2026:8541) | csaf_redhat | |
| BaseOS-8.2.0.Z.AUS:libnghttp2-0:1.33.0-3.el8_2.4.x86_64 libnghttp2-0:1.33.0-3.el8_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | fixed | libnghttp2-0:1.33.0-3.el8_2.4.x86_64 | vendor fix → libnghttp2-0:1.33.0-3.el8_2.4.x86_64 (RHSA-2026:8541) | csaf_redhat | |
| BaseOS-8.4.0.Z.AUS:libnghttp2-0:1.33.0-4.el8_4.3.i686 libnghttp2-0:1.33.0-4.el8_4.3.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | fixed | libnghttp2-0:1.33.0-4.el8_4.3.i686 | vendor fix → libnghttp2-0:1.33.0-4.el8_4.3.i686 (RHSA-2026:8539) | csaf_redhat | |
| BaseOS-8.4.0.Z.EUS.EXTENSION:libnghttp2-0:1.33.0-4.el8_4.3.i686 libnghttp2-0:1.33.0-4.el8_4.3.i686 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | fixed | libnghttp2-0:1.33.0-4.el8_4.3.i686 | vendor fix → libnghttp2-0:1.33.0-4.el8_4.3.i686 (RHSA-2026:8539) | csaf_redhat | |
| BaseOS-8.4.0.Z.AUS:libnghttp2-0:1.33.0-4.el8_4.3.x86_64 libnghttp2-0:1.33.0-4.el8_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | fixed | libnghttp2-0:1.33.0-4.el8_4.3.x86_64 | vendor fix → libnghttp2-0:1.33.0-4.el8_4.3.x86_64 (RHSA-2026:8539) | csaf_redhat | |
| BaseOS-8.4.0.Z.EUS.EXTENSION:libnghttp2-0:1.33.0-4.el8_4.3.x86_64 libnghttp2-0:1.33.0-4.el8_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | fixed | libnghttp2-0:1.33.0-4.el8_4.3.x86_64 | vendor fix → libnghttp2-0:1.33.0-4.el8_4.3.x86_64 (RHSA-2026:8539) | csaf_redhat | |
| BaseOS-8.6.0.Z.E4S:libnghttp2-0:1.33.0-4.el8_6.3.aarch64 libnghttp2-0:1.33.0-4.el8_6.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.aarch64 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.aarch64 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.AUS:libnghttp2-0:1.33.0-4.el8_6.3.i686 libnghttp2-0:1.33.0-4.el8_6.3.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.i686 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.i686 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.E4S:libnghttp2-0:1.33.0-4.el8_6.3.i686 libnghttp2-0:1.33.0-4.el8_6.3.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.i686 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.i686 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.TUS:libnghttp2-0:1.33.0-4.el8_6.3.i686 libnghttp2-0:1.33.0-4.el8_6.3.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.i686 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.i686 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.E4S:libnghttp2-0:1.33.0-4.el8_6.3.ppc64le libnghttp2-0:1.33.0-4.el8_6.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.ppc64le | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.ppc64le (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.E4S:libnghttp2-0:1.33.0-4.el8_6.3.s390x libnghttp2-0:1.33.0-4.el8_6.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.s390x | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.s390x (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.AUS:libnghttp2-0:1.33.0-4.el8_6.3.x86_64 libnghttp2-0:1.33.0-4.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.x86_64 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.x86_64 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.E4S:libnghttp2-0:1.33.0-4.el8_6.3.x86_64 libnghttp2-0:1.33.0-4.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.x86_64 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.x86_64 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.6.0.Z.TUS:libnghttp2-0:1.33.0-4.el8_6.3.x86_64 libnghttp2-0:1.33.0-4.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6) | fixed | libnghttp2-0:1.33.0-4.el8_6.3.x86_64 | vendor fix → libnghttp2-0:1.33.0-4.el8_6.3.x86_64 (RHSA-2026:8538) | csaf_redhat | |
| BaseOS-8.8.0.Z.E4S:libnghttp2-0:1.33.0-5.el8_8.2.i686 libnghttp2-0:1.33.0-5.el8_8.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8) | fixed | libnghttp2-0:1.33.0-5.el8_8.2.i686 | vendor fix → libnghttp2-0:1.33.0-5.el8_8.2.i686 (RHSA-2026:8540) | csaf_redhat | |
| BaseOS-8.8.0.Z.TUS:libnghttp2-0:1.33.0-5.el8_8.2.i686 libnghttp2-0:1.33.0-5.el8_8.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8) | fixed | libnghttp2-0:1.33.0-5.el8_8.2.i686 | vendor fix → libnghttp2-0:1.33.0-5.el8_8.2.i686 (RHSA-2026:8540) | csaf_redhat | |
| BaseOS-8.8.0.Z.E4S:libnghttp2-0:1.33.0-5.el8_8.2.ppc64le libnghttp2-0:1.33.0-5.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8) | fixed | libnghttp2-0:1.33.0-5.el8_8.2.ppc64le | vendor fix → libnghttp2-0:1.33.0-5.el8_8.2.ppc64le (RHSA-2026:8540) | csaf_redhat | |
| BaseOS-8.8.0.Z.E4S:libnghttp2-0:1.33.0-5.el8_8.2.x86_64 libnghttp2-0:1.33.0-5.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8) | fixed | libnghttp2-0:1.33.0-5.el8_8.2.x86_64 | vendor fix → libnghttp2-0:1.33.0-5.el8_8.2.x86_64 (RHSA-2026:8540) | csaf_redhat | |
| BaseOS-8.8.0.Z.TUS:libnghttp2-0:1.33.0-5.el8_8.2.x86_64 libnghttp2-0:1.33.0-5.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8) | fixed | libnghttp2-0:1.33.0-5.el8_8.2.x86_64 | vendor fix → libnghttp2-0:1.33.0-5.el8_8.2.x86_64 (RHSA-2026:8540) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:libnghttp2-0:1.33.0-6.el8_10.2.aarch64 libnghttp2-0:1.33.0-6.el8_10.2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | libnghttp2-0:1.33.0-6.el8_10.2.aarch64 | vendor fix → libnghttp2-0:1.33.0-6.el8_10.2.aarch64 (RHSA-2026:7667) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:libnghttp2-0:1.33.0-6.el8_10.2.i686 libnghttp2-0:1.33.0-6.el8_10.2.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | libnghttp2-0:1.33.0-6.el8_10.2.i686 | vendor fix → libnghttp2-0:1.33.0-6.el8_10.2.i686 (RHSA-2026:7667) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:libnghttp2-0:1.33.0-6.el8_10.2.ppc64le libnghttp2-0:1.33.0-6.el8_10.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | libnghttp2-0:1.33.0-6.el8_10.2.ppc64le | vendor fix → libnghttp2-0:1.33.0-6.el8_10.2.ppc64le (RHSA-2026:7667) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:libnghttp2-0:1.33.0-6.el8_10.2.s390x libnghttp2-0:1.33.0-6.el8_10.2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | libnghttp2-0:1.33.0-6.el8_10.2.s390x | vendor fix → libnghttp2-0:1.33.0-6.el8_10.2.s390x (RHSA-2026:7667) | csaf_redhat | |
| BaseOS-8.10.0.Z.MAIN.EUS:libnghttp2-0:1.33.0-6.el8_10.2.x86_64 libnghttp2-0:1.33.0-6.el8_10.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8) | fixed | libnghttp2-0:1.33.0-6.el8_10.2.x86_64 | vendor fix → libnghttp2-0:1.33.0-6.el8_10.2.x86_64 (RHSA-2026:7667) | csaf_redhat | |
| BaseOS-9.0.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_0.4.aarch64 libnghttp2-0:1.43.0-5.el9_0.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) | fixed | libnghttp2-0:1.43.0-5.el9_0.4.aarch64 | vendor fix → libnghttp2-0:1.43.0-5.el9_0.4.aarch64 (RHSA-2026:8546) | csaf_redhat | |
| BaseOS-9.0.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_0.4.i686 libnghttp2-0:1.43.0-5.el9_0.4.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) | fixed | libnghttp2-0:1.43.0-5.el9_0.4.i686 | vendor fix → libnghttp2-0:1.43.0-5.el9_0.4.i686 (RHSA-2026:8546) | csaf_redhat | |
| BaseOS-9.0.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_0.4.ppc64le libnghttp2-0:1.43.0-5.el9_0.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) | fixed | libnghttp2-0:1.43.0-5.el9_0.4.ppc64le | vendor fix → libnghttp2-0:1.43.0-5.el9_0.4.ppc64le (RHSA-2026:8546) | csaf_redhat | |
| BaseOS-9.0.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_0.4.s390x libnghttp2-0:1.43.0-5.el9_0.4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) | fixed | libnghttp2-0:1.43.0-5.el9_0.4.s390x | vendor fix → libnghttp2-0:1.43.0-5.el9_0.4.s390x (RHSA-2026:8546) | csaf_redhat | |
| BaseOS-9.0.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_0.4.x86_64 libnghttp2-0:1.43.0-5.el9_0.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.0) | fixed | libnghttp2-0:1.43.0-5.el9_0.4.x86_64 | vendor fix → libnghttp2-0:1.43.0-5.el9_0.4.x86_64 (RHSA-2026:8546) | csaf_redhat | |
| BaseOS-9.2.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_2.4.aarch64 libnghttp2-0:1.43.0-5.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | fixed | libnghttp2-0:1.43.0-5.el9_2.4.aarch64 | vendor fix → libnghttp2-0:1.43.0-5.el9_2.4.aarch64 (RHSA-2026:8545) | csaf_redhat | |
| BaseOS-9.2.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_2.4.i686 libnghttp2-0:1.43.0-5.el9_2.4.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | fixed | libnghttp2-0:1.43.0-5.el9_2.4.i686 | vendor fix → libnghttp2-0:1.43.0-5.el9_2.4.i686 (RHSA-2026:8545) | csaf_redhat | |
| BaseOS-9.2.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_2.4.ppc64le libnghttp2-0:1.43.0-5.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | fixed | libnghttp2-0:1.43.0-5.el9_2.4.ppc64le | vendor fix → libnghttp2-0:1.43.0-5.el9_2.4.ppc64le (RHSA-2026:8545) | csaf_redhat | |
| BaseOS-9.2.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_2.4.s390x libnghttp2-0:1.43.0-5.el9_2.4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | fixed | libnghttp2-0:1.43.0-5.el9_2.4.s390x | vendor fix → libnghttp2-0:1.43.0-5.el9_2.4.s390x (RHSA-2026:8545) | csaf_redhat | |
| BaseOS-9.2.0.Z.E4S:libnghttp2-0:1.43.0-5.el9_2.4.x86_64 libnghttp2-0:1.43.0-5.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2) | fixed | libnghttp2-0:1.43.0-5.el9_2.4.x86_64 | vendor fix → libnghttp2-0:1.43.0-5.el9_2.4.x86_64 (RHSA-2026:8545) | csaf_redhat | |
| BaseOS-9.4.0.Z.EUS:libnghttp2-0:1.43.0-5.el9_4.4.aarch64 libnghttp2-0:1.43.0-5.el9_4.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4) | fixed | libnghttp2-0:1.43.0-5.el9_4.4.aarch64 | vendor fix → libnghttp2-0:1.43.0-5.el9_4.4.aarch64 (RHSA-2026:8547) | csaf_redhat | |
| BaseOS-9.4.0.Z.EUS:libnghttp2-0:1.43.0-5.el9_4.4.i686 libnghttp2-0:1.43.0-5.el9_4.4.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4) | fixed | libnghttp2-0:1.43.0-5.el9_4.4.i686 | vendor fix → libnghttp2-0:1.43.0-5.el9_4.4.i686 (RHSA-2026:8547) | csaf_redhat | |
| BaseOS-9.4.0.Z.EUS:libnghttp2-0:1.43.0-5.el9_4.4.ppc64le libnghttp2-0:1.43.0-5.el9_4.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4) | fixed | libnghttp2-0:1.43.0-5.el9_4.4.ppc64le | vendor fix → libnghttp2-0:1.43.0-5.el9_4.4.ppc64le (RHSA-2026:8547) | csaf_redhat | |
| BaseOS-9.4.0.Z.EUS:libnghttp2-0:1.43.0-5.el9_4.4.s390x libnghttp2-0:1.43.0-5.el9_4.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4) | fixed | libnghttp2-0:1.43.0-5.el9_4.4.s390x | vendor fix → libnghttp2-0:1.43.0-5.el9_4.4.s390x (RHSA-2026:8547) | csaf_redhat | |
| BaseOS-9.4.0.Z.EUS:libnghttp2-0:1.43.0-5.el9_4.4.x86_64 libnghttp2-0:1.43.0-5.el9_4.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4) | fixed | libnghttp2-0:1.43.0-5.el9_4.4.x86_64 | vendor fix → libnghttp2-0:1.43.0-5.el9_4.4.x86_64 (RHSA-2026:8547) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:libnghttp2-0:1.43.0-6.el9_6.1.aarch64 libnghttp2-0:1.43.0-6.el9_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | libnghttp2-0:1.43.0-6.el9_6.1.aarch64 | vendor fix → libnghttp2-0:1.43.0-6.el9_6.1.aarch64 (RHSA-2026:8548) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:libnghttp2-0:1.43.0-6.el9_6.1.i686 libnghttp2-0:1.43.0-6.el9_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | libnghttp2-0:1.43.0-6.el9_6.1.i686 | vendor fix → libnghttp2-0:1.43.0-6.el9_6.1.i686 (RHSA-2026:8548) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:libnghttp2-0:1.43.0-6.el9_6.1.ppc64le libnghttp2-0:1.43.0-6.el9_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | libnghttp2-0:1.43.0-6.el9_6.1.ppc64le | vendor fix → libnghttp2-0:1.43.0-6.el9_6.1.ppc64le (RHSA-2026:8548) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:libnghttp2-0:1.43.0-6.el9_6.1.s390x libnghttp2-0:1.43.0-6.el9_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | libnghttp2-0:1.43.0-6.el9_6.1.s390x | vendor fix → libnghttp2-0:1.43.0-6.el9_6.1.s390x (RHSA-2026:8548) | csaf_redhat | |
| BaseOS-9.6.0.Z.EUS:libnghttp2-0:1.43.0-6.el9_6.1.x86_64 libnghttp2-0:1.43.0-6.el9_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6) | fixed | libnghttp2-0:1.43.0-6.el9_6.1.x86_64 | vendor fix → libnghttp2-0:1.43.0-6.el9_6.1.x86_64 (RHSA-2026:8548) | csaf_redhat | |
| BaseOS-9.7.0.Z.MAIN:libnghttp2-0:1.43.0-6.el9_7.1.aarch64 libnghttp2-0:1.43.0-6.el9_7.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | libnghttp2-0:1.43.0-6.el9_7.1.aarch64 | vendor fix → libnghttp2-0:1.43.0-6.el9_7.1.aarch64 (RHSA-2026:7668) | csaf_redhat | |
| BaseOS-9.7.0.Z.MAIN:libnghttp2-0:1.43.0-6.el9_7.1.i686 libnghttp2-0:1.43.0-6.el9_7.1.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | libnghttp2-0:1.43.0-6.el9_7.1.i686 | vendor fix → libnghttp2-0:1.43.0-6.el9_7.1.i686 (RHSA-2026:7668) | csaf_redhat | |
| BaseOS-9.7.0.Z.MAIN:libnghttp2-0:1.43.0-6.el9_7.1.ppc64le libnghttp2-0:1.43.0-6.el9_7.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | libnghttp2-0:1.43.0-6.el9_7.1.ppc64le | vendor fix → libnghttp2-0:1.43.0-6.el9_7.1.ppc64le (RHSA-2026:7668) | csaf_redhat | |
| BaseOS-9.7.0.Z.MAIN:libnghttp2-0:1.43.0-6.el9_7.1.s390x libnghttp2-0:1.43.0-6.el9_7.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | libnghttp2-0:1.43.0-6.el9_7.1.s390x | vendor fix → libnghttp2-0:1.43.0-6.el9_7.1.s390x (RHSA-2026:7668) | csaf_redhat | |
| BaseOS-9.7.0.Z.MAIN:libnghttp2-0:1.43.0-6.el9_7.1.x86_64 libnghttp2-0:1.43.0-6.el9_7.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) | fixed | libnghttp2-0:1.43.0-6.el9_7.1.x86_64 | vendor fix → libnghttp2-0:1.43.0-6.el9_7.1.x86_64 (RHSA-2026:7668) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:libnghttp2-0:1.64.0-2.el10_0.1.aarch64 libnghttp2-0:1.64.0-2.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | libnghttp2-0:1.64.0-2.el10_0.1.aarch64 | vendor fix → libnghttp2-0:1.64.0-2.el10_0.1.aarch64 (RHSA-2026:8868) | csaf_redhat | |
| BaseOS-10.0.Z.E2S:libnghttp2-0:1.64.0-2.el10_0.1.ppc64le libnghttp2-0:1.64.0-2.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | fixed | libnghttp2-0:1.64.0-2.el10_0.1.ppc64le | vendor fix → libnghttp2-0:1.64.0-2.el10_0.1.ppc64le (RHSA-2026:8868) | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.