Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
22606241 by Salvatore Bonaccorso at 2026-06-06T13:55:22+02:00
Add CVE-2026-10725/libprotocol-http2-perl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2804,6 +2804,10 @@ CVE-2026-42504 (Decoding a maliciously-crafted MIME
header containing many inval
NOTE: https://github.com/golang/go/issues/79217
NOTE:
https://github.com/golang/go/commit/7f24db453a60faf6a3546d60bb02917a0a7aace0
(go1.26.4)
NOTE:
https://github.com/golang/go/commit/b79e0339290e14b3b2de1dc4942b8a88701ddb02
(go1.25.11)
+CVE-2026-10725 [vulnerable to a HTTP/2 Bomb]
+ - libprotocol-http2-perl <unfixed>
+ NOTE: https://lists.security.metacpan.org/cve-announce/msg/40751319/
+ NOTE:
https://security.metacpan.org/patches/P/Protocol-HTTP2/1.12/CVE-2026-10725-r1.patch
CVE-2026-47774
- envoyproxy <itp> (bug #987544)
NOTE:
https://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22606241243d34b018c93cfd7b69f881061ddb31
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22606241243d34b018c93cfd7b69f881061ddb31
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
