[Git][security-tracker-team/security-tracker][master] Add CVE-2026-49975/apache2
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Jun 3 06:24:54 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
c46b5083 by Salvatore Bonaccorso at 2026-06-03T07:20:56+02:00
Add CVE-2026-49975/apache2
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,8 @@
+CVE-2026-49975
+ - apache2 <unfixed>
+ NOTE: https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb
+ NOTE: https://github.com/icing/mod_h2/pull/324
+ NOTE: https://github.com/icing/mod_h2/commit/35c6e405390ed361189a82acd96675401ea5947c (v2.0.41)
CVE-2026-10702
- firefox 151.0.3-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-54/#CVE-2026-10702
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c46b5083e87622c70eb968249ea28ae9f072aef5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c46b5083e87622c70eb968249ea28ae9f072aef5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260603/6e7eb0c8/attachment.htm>
More information about the debian-security-tracker-commits
mailing list