Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
02a66024 by Bastien Roucariès at 2026-08-14T00:18:02+02:00
CVE-2026-56848/commit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13086,6 +13086,7 @@ CVE-2026-58041 (A flaw in Node.js node:sqlite allows a
stale StatementSyncIterat
CVE-2026-56848 (A flaw in Node.js HTTP/2 handling allows
`nghttp2_session_mem_send()` ...)
- nodejs 24.19.0+dfsg+~cs24.13.3-1
NOTE:
https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#http2-re-entrant-send-can-cause-heap-use-after-free-cve-2026-56848---high
+ NOTE: Fixed by
https://github.com/nodejs/node/commit/daa6d25e3dceb30edb832a778ec0610c8bc2dd12
(v22.23.2)
CVE-2026-56846 (A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained
header blo ...)
- nodejs 24.19.0+dfsg+~cs24.13.3-1
NOTE:
https://nodejs.org/en/blog/vulnerability/july-2026-security-releases#http2-retained-headers-can-bypass-maxsessionmemory-limits-cve-2026-56846---high
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02a6602450210cc78e77e917a9e03faecc7a980d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02a6602450210cc78e77e917a9e03faecc7a980d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
