Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
97845d26 by Bastien Roucariès at 2026-08-13T21:51:05+02:00
CVE-2026-56846/commit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13089,6 +13089,7 @@ CVE-2026-56848 (A flaw in Node.js HTTP/2 handling
allows `nghttp2_session_mem_se
CVE-2026-56846 (A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained
header blo ...)
- nodejs 24.19.0+dfsg+~cs24.13.3-1
NOTE:
https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#http2-retained-headers-can-bypass-maxsessionmemory-limits-cve-2026-56846---high
+ NOTE: Fixed by:
https://github.com/nodejs/node/commit/f14d78b9e0201bfe0291f2b0dc4b5d88c70cc28e
(v22.23.2)
CVE-2026-66066 (Action Pack is a framework for handling and responding to web
requests ...)
- rails 2:7.2.3.2+dfsg-1 (bug #1143080)
NOTE:
https://github.com/rails/rails/security/advisories/GHSA-xr9x-r78c-5hrm
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97845d2684175fff8b728b33b005682f8885a5c6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97845d2684175fff8b728b33b005682f8885a5c6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
