Oracle alert ELSA-2026-25057 (mod_http2)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-25057 Important: Oracle Linux 9 mod_http2 security update | |
| Date: | Wed, 24 Jun 2026 22:08:31 -0700 | |
| Message-ID: | <mailman.81.1782364133.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-25057 http://linux.oracle.com/errata/ELSA-2026-25057.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: mod_http2-2.0.26-6.el9_8.1.x86_64.rpm aarch64: mod_http2-2.0.26-6.el9_8.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/mod_http2-2.0.26-... Related CVEs: CVE-2026-49975 Description of changes: [2.0.26-6.1] - Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.26-6] - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata