-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-705eb9cf95 2026-04-28 01:29:45.334770+00:00 --------------------------------------------------------------------------------
Name : ngtcp2 Product : Fedora 44 Version : 1.22.1 Release : 1.fc44 URL : https://github.com/ngtcp2/ngtcp2 Summary : Implementation of RFC 9000 QUIC protocol Description : "Call it TCP/2. One More Time."
ngtcp2 project is an effort to implement RFC9000 QUIC protocol.
-------------------------------------------------------------------------------- Update Information:
Update to 1.22.1 (rhbz#2452790) Fixes CVE-2026-40170 -------------------------------------------------------------------------------- ChangeLog:
* Mon Apr 20 2026 Petr Menšík pemensik@redhat.com - 1.22.1-1 - Update to 1.22.1 (rhbz#2452790) - Fixes CVE-2026-40170 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2452790 - ngtcp2-1.22.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452790 [ 2 ] Bug #2459283 - CVE-2026-40170 ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2459283 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-705eb9cf95' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------