Oracle Errata System
Oracle Linux
5.11
2026-04-13T10:20:46
ELSA-2026-7666: nghttp2 security update (IMPORTANT)
Oracle Linux 10
[1.64.0-2.1]
- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-27135
cpe:/o:oracle:linux:10:1:baseos_patch
cpe:/a:oracle:linux:10::appstream
cpe:/o:oracle:linux:10::baseos_latest
cpe:/a:oracle:linux:10::codeready_builder
nghttp2
libnghttp2-devel
libnghttp2
oraclelinux-release
bc4d06a08d8b756f
^10
aarch64
0:1.64.0-2.el10_1.1
x86_64