Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
392d5ef2 by Salvatore Bonaccorso at 2026-05-14T10:52:21+02:00
Add CVE-2026-8466/erlang-cowboy
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2,7 +2,10 @@ CVE-2026-8496 (A cross-site scripting (XSS) vulnerability
exists in Alinto SOGo,
- sogo 5.12.8-1
NOTE:
https://github.com/Alinto/sogo/commit/67ce01ec2a1a7854d8e9f615dd65afb949043e8
(SOGo-5.12.8)
CVE-2026-8466 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
- TODO: check
+ - erlang-cowboy <unfixed>
+ NOTE: https://cna.erlef.org/cves/CVE-2026-8466.html
+ NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-8466
+ NOTE: Fixed by:
https://github.com/ninenines/cowboy/commit/5c6a2061b41bb5771c4659fac7d5a822dca5bafb
(2.15.0)
CVE-2026-8369 (Improper Input Validation in the NAT64 translator in The
OpenThread Au ...)
NOT-FOR-US: OpenThread
CVE-2026-8367 (aria2c accepts a server certificate with incorrect Extended Key
Usage ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/392d5ef2cf597c18408f7c9ea722424dbe2b8476
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/392d5ef2cf597c18408f7c9ea722424dbe2b8476
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
