Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
92c34bbe by Salvatore Bonaccorso at 2026-06-06T14:47:57+02:00
Track fixed version for CVE-2026-10725 via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2805,7 +2805,7 @@ CVE-2026-42504 (Decoding a maliciously-crafted MIME
header containing many inval
NOTE:
https://github.com/golang/go/commit/7f24db453a60faf6a3546d60bb02917a0a7aace0
(go1.26.4)
NOTE:
https://github.com/golang/go/commit/b79e0339290e14b3b2de1dc4942b8a88701ddb02
(go1.25.11)
CVE-2026-10725 [vulnerable to a HTTP/2 Bomb]
- - libprotocol-http2-perl <unfixed>
+ - libprotocol-http2-perl 1.12-2
NOTE: https://lists.security.metacpan.org/cve-announce/msg/40751319/
NOTE:
https://security.metacpan.org/patches/P/Protocol-HTTP2/1.12/CVE-2026-10725-r1.patch
CVE-2026-47774
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92c34bbee5633b5becb76b8dbded2395ef9b66ba
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92c34bbee5633b5becb76b8dbded2395ef9b66ba
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
