Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3aac3512 by Bastien Roucariès at 2026-08-13T16:25:09+02:00
CVE-2026-48937 commit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -49111,6 +49111,7 @@ CVE-2026-48984 (pam_usb provides hardware
authentication for Linux using ordinar
CVE-2026-48937 (A flaw in Node.js HTTP/2 server API can cause servers to keep
acceptin ...)
- nodejs 24.17.0+dfsg+~cs24.13.2-1
NOTE:
https://nodejs.org/en/blog/vulnerability/june-2026-security-releases#http2-sessions-never-clean-up-after-goaway-on-invalid-protocol-errors-cve-2026-48937---medium
+ NOTE:
https://github.com/nodejs/node/commit/a1a5bb968303229d4a3a7c9e389dc3ece6237b4c
(v22.23.0)
CVE-2026-48617 (A flaw in Node.js Permission Model enforcement allows Bypass
via `proc ...)
- nodejs 24.17.0+dfsg+~cs24.13.2-1
[bookworm] - nodejs <not-affected> ((Permission Model is a Node 20+
feature)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3aac3512b0e4729b7309df93b0427fecd88452bf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3aac3512b0e4729b7309df93b0427fecd88452bf
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
