Oracle Linux 9 nghttp2 Significant Denial of Service Patch ELSA-2026-7669
oracle
April 13, 2026
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Summary
[1.43.0-6.1] - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)
Topics Covered
SRPMs
http://oss.oracle.com/ol9/SRPMS-updates/nghttp2-1.43.0-6.el9_7.1.src.rpm
x86_64
libnghttp2-1.43.0-6.el9_7.1.i686.rpm libnghttp2-1.43.0-6.el9_7.1.x86_64.rpm libnghttp2-devel-1.43.0-6.el9_7.1.i686.rpm libnghttp2-devel-1.43.0-6.el9_7.1.x86_64.rpm nghttp2-1.43.0-6.el9_7.1.x86_64.rpm
aarch64
libnghttp2-1.43.0-6.el9_7.1.aarch64.rpm libnghttp2-devel-1.43.0-6.el9_7.1.aarch64.rpm nghttp2-1.43.0-6.el9_7.1.aarch64.rpm
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Related CVEs:
CVE-2026-27135
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!