{
  "cves": [
    "CVE-2026-43951",
    "CVE-2026-48913"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[2.0.29-4.2]\n- Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913\n\n[2.0.29-4.1]\n- Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via\n  compression bomb and Slowloris-style attack (CVE-2026-49975)\n\n[2.0.29-4]\n- Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory\n  Increase (CVE-2025-53020)",
  "id": "ELSA-2026-34355",
  "ovalId": "oval:com.oracle.elsa:def:202634355",
  "source": "oracle_linux",
  "title": "ELSA-2026-34355:  mod_http2 security, bug fix, and enhancement update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-34355.html"
}