ELSA-2024-8680
- ULN >
- Oracle Linux Errata repository >
- ELSA-2024-8680
ELSA-2024-8680 - mod_http2 security update
| Type: | SECURITY |
| Severity: | LOW |
| Release Date: | 2024-10-30 |
Description
[2.0.26-2.1]
- Resolves: RHEL-45803 - mod_http2: DoS by null pointer in websocket
over HTTP/2 (CVE-2024-36387)
Related CVEs
| CVE-2024-36387 |
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (aarch64) | mod_http2-2.0.26-2.el9_4.1.src.rpm | 758dcebef4c2da228776a947887ecb92 | - | ol9_aarch64_appstream |
| mod_http2-2.0.26-2.el9_4.1.aarch64.rpm | e94408d78ca44f8b68e3ec38146dfe0f | - | ol9_aarch64_appstream | |
| Oracle Linux 9 (x86_64) | mod_http2-2.0.26-2.el9_4.1.src.rpm | 758dcebef4c2da228776a947887ecb92 | - | ol9_x86_64_appstream |
| mod_http2-2.0.26-2.el9_4.1.x86_64.rpm | b50479e2b23ff6a9759a8d31c4aae019 | - | ol9_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:
- Oracle customers - enter a support request
- Vulnerability scanning tools vendors and project maintainers - follow the standard ISV process
