Source: janus X-Debbugs-CC: [email protected] Severity: important Tags: security
Hi, The following vulnerability was published for janus. CVE-2026-108830[0]: | A weakness has been identified in meetecho janus-gateway up to | 1.4.2. This affects an unknown part of the file | src/plugins/janus_videoroom.c of the component VideoRoom. This | manipulation causes race condition. Remote exploitation of the | attack is possible. The attack's complexity is rated as high. It is | indicated that the exploitability is difficult. The exploit has been | made available to the public and could be used for attacks. Patch | name: 27c0d1af888153e818675b56a4e6267f62d57097. Applying a patch is | the recommended action to fix this issue. The vendor was contacted | early, responded in a very professional manner and quickly released | a fixed version of the affected product. https://github.com/meetecho/janus-gateway/commit/27c0d1af888153e818675b56a4e6267f62d57097 If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-108830 https://www.cve.org/CVERecord?id=CVE-2026-108830 Please adjust the affected versions in the BTS as needed.
