Linux
ngtcp2 security updates
Patch Radar has 3 security fixes for ngtcp2, closing 1 CVE. The newest is DEBIAN-CVE-2026-40170 (0.12.1+dfsg-1+deb12u1), released May 15, 2026.
Latest version
n/a
Release date not known
Security fixes
3
On record in Patch Radar
CVEs
1
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | DEBIAN-CVE-2026-40170 | Debian 12.15 (bookworm) | 0.12.1+dfsg-1+deb12u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40170 | Debian 13.5 (trixie) | 1.11.0-1+deb13u1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40170 | Debian 14 | 1.22.1-1 | 1 | May 15, 2026 |