Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Oracle Linux 10 mod_http2 Important DoS Vulnerability ELSA-2026-25225

oracle
Calendar Grey July 20, 2026
Scroller Oracle
Updated Oracle Linux 10 rpms resolve important issues including remote denial of service vulnerabilities in mod_http2.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

Summary

[2.0.29-4.2] - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 [2.0.29-4.1] - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.29-4] - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)

Topics%20covered

Topics Covered

security advisory denial of service remote access important Oracle mod_http2

SRPMs

http://oss.oracle.com/ol10/SRPMS-updates/mod_http2-2.0.29-4.el10_2.2.src.rpm

x86_64

mod_http2-2.0.29-4.el10_2.2.x86_64.rpm

aarch64

mod_http2-2.0.29-4.el10_2.2.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-49975

Topics%20covered

Topics Covered

security advisory denial of service remote access important Oracle mod_http2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.