SUSE-SU-2026:4182-1 Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by streamstate from the connection stream table bsc1279629...

[SECURITY] Fedora 43 Update: perl-Protocol-HTTP2-1.14-1.fc43

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

[SECURITY] Fedora 44 Update: perl-Protocol-HTTP2-1.14-1.fc44

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

[SECURITY] Fedora 45 Update: perl-Protocol-HTTP2-1.14-1.fc45

Protocol::HTTP2 is Perl HTTP/2 protocol implementation RFC 7540 with stateful decoders/encoders of HTTP/2 frames. You may use this module to implement your own HTTP/2 client/server/intermediate on top of your favorite event loop over plain or TLS socket...

Fedora 43 : perl-Protocol-HTTP2 (2026-06b545f607)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-06b545f607 advisory. This release fixes CVE-2026-16028 a memory exhaustion causing a denial of service and a license wording. Tenable has extracted the preceding...

Fedora 44 : perl-Protocol-HTTP2 (2026-e06691a7c4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e06691a7c4 advisory. This release fixes CVE-2026-16028 a memory exhaustion causing a denial of service and a license wording. Tenable has extracted the preceding...

perl-Protocol-HTTP2-1.140.0-1.1 on GA media (moderate)

perl-Protocol-HTTP2-1.140.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11735-1 Rating: moderate Cross-References: CVE-2026-16028 CVSS scores: CVE-2026-16028 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-16028 SUSE : 8.7...

OPENSUSE-SU-2026:11735-1 perl-Protocol-HTTP2-1.140.0-1.1 on GA media

These are all security issues fixed in the perl-Protocol-HTTP2-1.140.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89713

These are all security issues fixed in the perl-Protocol-HTTP2-1.140.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for perl-Protocol-HTTP2 (important)

openSUSE security update: security update for perl-protocol-http2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21125-1 Rating: important References: bsc1267857 Cross-References: CVE-2026-10725 CVSS scores: CVE-2026-10725 SUSE : 7.5...

SUSE SLES16 Security Update : perl-Protocol-HTTP2 (SUSE-SU-2026:22188-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22188-1 advisory. This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-li...

CVE-2026-11373 Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite::Client is a client for the statsite protocol, which is a variant of statsd. Newlines are not removed from metric names, allowing metric injections. Values are not sanitised for newlines or other protocol...

OPENSUSE-SU-2026:21125-1 Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit bsc1267857...

Fedora 43 : perl-Protocol-HTTP2 (2026-4c8da3ad64)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4c8da3ad64 advisory. This release fixes CVE-2026-10725 exhausting memory when decompressing request headers. It also improves examples. Tenable has extracted the precedi...

SUSE SLES15 Security Update : perl-Protocol-HTTP2 (SUSE-SU-2026:2306-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2306-1 advisory. This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limi...

perl-Protocol-HTTP2-1.130.0-1.1 on GA media (moderate)

perl-Protocol-HTTP2-1.130.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10988-1 Rating: moderate Cross-References: CVE-2026-10725 CVSS scores: CVE-2026-10725 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit HTTP/2 Bomb attack bsc1267857. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdat...

SUSE-SU-2026:2306-1 Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit HTTP/2 Bomb attack bsc1267857...

OPENSUSE-SU-2026:10988-1 perl-Protocol-HTTP2-1.130.0-1.1 on GA media

These are all security issues fixed in the perl-Protocol-HTTP2-1.130.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-10725

Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory the "HTTP/2 bomb". The headersdecode method materialises a full key+value copy per indexe...