{"cves":["CVE-2026-43951","CVE-2026-48913"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[2.0.29-4.2]\n- Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913\n\n[2.0.29-4.1]\n- Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via\n  compression bomb and Slowloris-style attack (CVE-2026-49975)\n\n[2.0.29-4]\n- Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory\n  Increase (CVE-2025-53020)","id":"ELSA-2026-34355","ovalId":"oval:com.oracle.elsa:def:202634355","source":"oracle_linux","title":"ELSA-2026-34355:  mod_http2 security, bug fix, and enhancement update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-34355.html"}