Oracle alert ELSA-2026-34355 (mod_http2)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-34355 Moderate: Oracle Linux 10 mod_http2 security, bug fix, and enhancement update | |
| Date: | Fri, 17 Jul 2026 09:57:41 -0700 | |
| Message-ID: | <mailman.380.1784307524.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-34355 http://linux.oracle.com/errata/ELSA-2026-34355.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: mod_http2-2.0.29-4.el10_2.2.x86_64.rpm aarch64: mod_http2-2.0.29-4.el10_2.2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/mod_http2-2.0.29... Related CVEs: CVE-2026-43951 CVE-2026-48913 Description of changes: [2.0.29-4.2] - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 [2.0.29-4.1] - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.29-4] - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata