[El-errata] ELSA-2026-22551 Moderate: Oracle Linux 9 mod_http2 security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Sat Jun 27 03:30:38 UTC 2026
Oracle Linux Security Advisory ELSA-2026-22551
http://linux.oracle.com/errata/ELSA-2026-22551.html
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
x86_64:
mod_http2-2.0.26-6.el9_8.1.x86_64.rpm
aarch64:
mod_http2-2.0.26-6.el9_8.1.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/mod_http2-2.0.26-6.el9_8.1.src.rpm
Related CVEs:
CVE-2025-53020
Description of changes:
[2.0.26-6.1]
- Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via
compression bomb and Slowloris-style attack (CVE-2026-49975)
[2.0.26-6]
- Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
Increase (CVE-2025-53020)
More information about the El-errata
mailing list