[Git][security-tracker-team/security-tracker][master] CVE-2026-69185/LTS
Bastien Roucariès (@rouca)
rouca at debian.org
Thu Aug 6 21:09:30 BST 2026
Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits:
eb0f2c8b by Bastien Roucariès at 2026-08-06T22:09:09+02:00
CVE-2026-69185/LTS
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2164,6 +2164,8 @@ CVE-2026-69192 (ip-address is a library for parsing and manipulating IPv4 and IP
NOTE: Fixed by: https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e (v10.3.1)
CVE-2026-69185 (Socket.IO enables bidirectional and low-latency communication for ever ...)
- node-socket.io-parser <unfixed> (bug #1143598)
+ [bookworm] - node-socket.io-parser <postponed> (minor issue; DoS)
+ [bullseye] - node-socket.io-parser <postponed> (minor issue; DoS)
NOTE: https://github.com/socketio/socket.io/security/advisories/GHSA-2m8v-j782-fhvr
NOTE: Fixed by: https://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b2a7b4 (socket.io-parser at 4.2.7)
NOTE: Fixed by: https://github.com/socketio/socket.io/commit/ced94ffa3ac020a8f3c14eb98a3bf34acb14d291 (socket.io-parser at 3.4.5)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb0f2c8bcc4406b5b5d82a15218a46b5382c98f1
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb0f2c8bcc4406b5b5d82a15218a46b5382c98f1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/e377898f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list