Fedora 44 : perl-Protocol-HTTP2 (2026-e06691a7c4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e06691a7c4 advisory. This release fixes CVE-2026-16028 a memory exhaustion causing a denial of service and a license wording. Tenable has extracted the preceding...

CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...