Alerts This Week
Warning Icon 1 935
Alerts This Week
Warning Icon 1 935

Oracle Linux 9 mod_http2 Important Remote DoS Advisory ELSA-2026-25057

oracle
Calendar Grey June 25, 2026
Oracle Linux Logo Esm H88
Oracle Linux 9 advisory highlights updated mod_http2 packages to mitigate remote denial of service threats based on CVE-2026-49975.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[2.0.26-6.1] - Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.26-6] - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)

Topics%20covered

Topics Covered

security advisory denial of service important remote Oracle mod_http2

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/mod_http2-2.0.26-6.el9_8.1.src.rpm

x86_64

mod_http2-2.0.26-6.el9_8.1.x86_64.rpm

aarch64

mod_http2-2.0.26-6.el9_8.1.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-49975

Topics%20covered

Topics Covered

security advisory denial of service important remote Oracle mod_http2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here