[Git][security-tracker-team/security-tracker][master] Add CVE-2026-19879/undertow

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d4436eae by Salvatore Bonaccorso at 2026-08-16T08:04:01+02:00
Add CVE-2026-19879/undertow

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4778,7 +4778,8 @@ CVE-2026-19884 (In Eclipse Theia versions up to and including 1.69.0, opening a
 CVE-2026-19880 (Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (l ...)
 	TODO: check
 CVE-2026-19879 (A flaw was found in Undertow, an HTTP server, within its HTTP response ...)
-	TODO: check
+	- undertow <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2516038
 CVE-2026-19871 (Use of Hard-coded Credentials in the human resources component in Rosk ...)
 	NOT-FOR-US: Roskus Prospero Flow CRM
 CVE-2026-19870 (Authorization Bypass Through User-Controlled Key in the payroll module ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4436eae6ca7dfcc85d1b720fb8f69632f3ce767

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4436eae6ca7dfcc85d1b720fb8f69632f3ce767
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260816/c7252901/attachment-0001.htm>