[Git][security-tracker-team/security-tracker][master] Add two h2o issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
75c98be0 by Salvatore Bonaccorso at 2026-07-18T22:54:55+02:00
Add two h2o issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1021,9 +1021,13 @@ CVE-2026-44596 (Yamcs is a mission control framework. Prior to 5.12.7, the authe
 CVE-2026-44595 (Yamcs is a mission control framework. Prior to 5.12.7, the IAM API end ...)
 	NOT-FOR-US: Yamcs
 CVE-2026-44453 (h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Pr ...)
-	TODO: check
+	- h2o <removed>
+	NOTE: https://github.com/h2o/h2o/security/advisories/GHSA-rf9v-m59p-mq84
+	NOTE: Fixed by: https://github.com/h2o/h2o/commit/6b5370d9d09fcf83aa7620ddf77de1954a192181
 CVE-2026-44452 (h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Pr ...)
-	TODO: check
+	- h2o <removed>
+	NOTE: https://github.com/h2o/h2o/security/advisories/GHSA-w68q-rqwx-7wvq
+	NOTE: Fixed by (merge): https://github.com/h2o/h2o/commit/8dc37cb1e6171f7f772667618ea440696fed82c3
 CVE-2026-44436 (Quicly is an IETF QUIC protocol implementation intended primarily for  ...)
 	TODO: check
 CVE-2026-44435 (Quicly is an IETF QUIC protocol implementation intended primarily for  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75c98be0426066d3d87b7c36349e1f58c5af5fef

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75c98be0426066d3d87b7c36349e1f58c5af5fef
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260718/007968bc/attachment-0001.htm>