Alerts This Week
Warning Icon 1 548
Alerts This Week
Warning Icon 1 548

Fedora 43 perl-Protocol-HTTP2 Important Denial of Service CVE-2026-10725

fedora
Calendar Grey June 17, 2026
Dist Fedora Esm H88
This release of perl-Protocol-HTTP2 addresses CVE-2026-10725, preventing memory exhaustion during request header decompression.
This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers)

Summary

Protocol::HTTP2 is Perl HTTP/2 protocol implementation (RFC 7540) with

stateful decoders/encoders of HTTP/2 frames. You may use this module to

implement your own HTTP/2 client/server/intermediate on top of your favorite

event loop over plain or TLS socket.

Update Information:

This release fixes CVE-2026-10725 (exhausting memory when decompressing request headers). It also improves examples.

Topics%20covered

Topics Covered

security advisory denial of service fedora important perl-Protocol-HTTP2 CVE-2026-10725

Change Log

* Mon Jun 8 2026 Petr Pisar - 1.13-1 - 1.13 bump

References


[ 1 ] Bug #2485660 - CVE-2026-10725 Protocol::HTTP2: Protocol::HTTP2: Denial of Service via HTTP/2 Bomb https://bugzilla.redhat.com/show_bug.cgi?id=2485660

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-4c8da3ad64' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-Protocol-HTTP2
Product: Fedora 43
Version: 1.13
Release: 1.fc43
URL: https://metacpan.org/release/Protocol-HTTP2
Summary: HTTP/2 protocol implementation (RFC 7540)

Topics%20covered

Topics Covered

security advisory denial of service fedora important perl-Protocol-HTTP2 CVE-2026-10725

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here