Back Linuxsecurity

Fedora 45 perl-Protocol

Linuxsecurity •LinuxSecurity Advisories • September 15, 2026

Share: View original

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

Protocol::HTTP2 is Perl HTTP/2 protocol implementation (RFC 7540) with

stateful decoders/encoders of HTTP/2 frames. You may use this module to

implement your own HTTP/2 client/server/intermediate on top of your favorite

event loop over plain or TLS socket.

This release fixes CVE-2026-16028 (a memory exhaustion causing a denial of service) and a license wording.

* Fri Sep 4 2026 Petr Pisar - 1.14-1 - 1.14 bump

[ 1 ] Bug #2529576 - CVE-2026-16028 perl-Protocol-HTTP2: Protocol::HTTP2: Denial of Service via memory exhaustion from unremoved closed streams

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-038229756e' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Fedora's perl-Protocol::HTTP2 Exposes Admin Control Risks A critical vulnerability (CVE-2026-16028) in Fedora's perl-Protocol::HTTP2 allows attackers to gain administrative control through chained flaws. This vulnerability, which causes memory exhaustion leading to denial of service, affects multiple Fedora versions, including 43, 44, and 45. The issue was disclosed on September 7, 2026, and is linked to unremoved closed streams in the HTTP/2 protocol implementation. Users are urged to upgrade to the latest version to mitigate risks. The vulnerability has been confirmed and is associated with an advisory issued by Petr Pisar. The update can be installed using the 'dnf' update program. Organizations using Fedora should prioritize applying the patch to prevent potential exploitation. 3 sources 58

Extracted Entities

Fedora 45 perl-Protocol

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)