{
  "product": "nghttp2-server",
  "url": "https://patchblox.com/security/product/linux/nghttp2-server",
  "summary": "Patch Radar has 19 security fixes for nghttp2-server, closing 8 CVEs, 1 of which is being exploited. The newest security fix is nghttp2-server 1.64.0-1.1ubuntu1.2, released July 3, 2026.",
  "platform": "linux",
  "supported": true,
  "fixCount": 19,
  "cveCount": 8,
  "exploitedCveCount": 1,
  "unfixedCveCount": 0,
  "fixes": [
    {
      "fix": "nghttp2-server 1.64.0-1.1ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-nghttp2-server-1.64.0-1.1ubuntu1.2",
      "released": "2026-07-03T14:54:58Z",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "1.64.0-1.1ubuntu1.2",
      "priority": "Routine",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.59.0-1ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-nghttp2-server-1.59.0-1ubuntu0.4",
      "released": "2026-07-03T14:54:55Z",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.59.0-1ubuntu0.4",
      "priority": "Routine",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.43.0-1ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-nghttp2-server-1.43.0-1ubuntu0.4",
      "released": "2026-07-03T14:54:52Z",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.43.0-1ubuntu0.4",
      "priority": "Routine",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.68.0-2ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-nghttp2-server-1.68.0-2ubuntu0.2",
      "released": "2026-06-27T19:16:00Z",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1.68.0-2ubuntu0.2",
      "priority": "Routine",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.30.0-1ubuntu1\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nghttp2-server-1.30.0-1ubuntu1-esm3",
      "released": "2026-03-18T11:16:00Z",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.30.0-1ubuntu1\u002Besm3",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.40.0-1ubuntu0.3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nghttp2-server-1.40.0-1ubuntu0.3-esm1",
      "released": "2026-03-18T11:16:00Z",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.40.0-1ubuntu0.3\u002Besm1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.43.0-1ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-nghttp2-server-1.43.0-1ubuntu0.3",
      "released": "2026-03-18T11:16:00Z",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.43.0-1ubuntu0.3",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.59.0-1ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-nghttp2-server-1.59.0-1ubuntu0.3",
      "released": "2026-03-18T11:16:00Z",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.59.0-1ubuntu0.3",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.64.0-1.1ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-nghttp2-server-1.64.0-1.1ubuntu1.1",
      "released": "2026-03-18T11:16:00Z",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "1.64.0-1.1ubuntu1.1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.68.0-2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-nghttp2-server-1.68.0-2ubuntu0.1",
      "released": "2026-03-18T11:16:00Z",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1.68.0-2ubuntu0.1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.30.0-1ubuntu1\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nghttp2-server-1.30.0-1ubuntu1-esm2",
      "released": "2024-04-04T08:15:00Z",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.30.0-1ubuntu1\u002Besm2",
      "priority": "Patch now",
      "cveCount": 4,
      "exploitedCveCount": 1
    },
    {
      "fix": "nghttp2-server 1.40.0-1ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nghttp2-server-1.40.0-1ubuntu0.3",
      "released": "2024-04-04T08:15:00Z",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.40.0-1ubuntu0.3",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.43.0-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-nghttp2-server-1.43.0-1ubuntu0.2",
      "released": "2024-04-04T08:15:00Z",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.43.0-1ubuntu0.2",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.59.0-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-nghttp2-server-1.59.0-1ubuntu0.1",
      "released": "2024-04-04T08:15:00Z",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.59.0-1ubuntu0.1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.40.0-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nghttp2-server-1.40.0-1ubuntu0.2",
      "released": "2023-10-09T17:00:00Z",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.40.0-1ubuntu0.2",
      "priority": "Patch now",
      "cveCount": 1,
      "exploitedCveCount": 1
    },
    {
      "fix": "nghttp2-server 1.43.0-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-nghttp2-server-1.43.0-1ubuntu0.1",
      "released": "2023-10-09T17:00:00Z",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.43.0-1ubuntu0.1",
      "priority": "Patch now",
      "cveCount": 1,
      "exploitedCveCount": 1
    },
    {
      "fix": "nghttp2-server 1.30.0-1ubuntu1\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nghttp2-server-1.30.0-1ubuntu1-esm1",
      "released": "2020-06-03T16:15:00Z",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.30.0-1ubuntu1\u002Besm1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.40.0-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-nghttp2-server-1.40.0-1ubuntu0.1",
      "released": "2020-06-03T16:15:00Z",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.40.0-1ubuntu0.1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    },
    {
      "fix": "nghttp2-server 1.30.0-1ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-nghttp2-server-1.30.0-1ubuntu1",
      "released": "2018-04-12T08:00:00Z",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.30.0-1ubuntu1",
      "priority": "High",
      "cveCount": 1,
      "exploitedCveCount": 0
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}