[Git][security-tracker-team/security-tracker][master] Add some NFUs in netty-incubator-codec-http
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Jun 5 08:11:48 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dd2894bd by Salvatore Bonaccorso at 2026-06-05T09:11:14+02:00
Add some NFUs in netty-incubator-codec-http
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -101,9 +101,9 @@ CVE-2026-49185 (The FieldX MDM adb messaging topic passes unverified payloads di
CVE-2026-49077 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-48480 (The netty incubator codec.bhttp is a java language binary http parser. ...)
- TODO: check
+ NOT-FOR-US: netty-incubator-codec-ohttp
CVE-2026-48040 (The netty incubator codec.bhttp is a java language binary http parser. ...)
- TODO: check
+ NOT-FOR-US: netty-incubator-codec-ohttp
CVE-2026-47707 (Strawberry GraphQL is a library for creating GraphQL APIs. In versions ...)
NOT-FOR-US: Strawberry GraphQL
CVE-2026-47706 (Strawberry GraphQL is a library for creating GraphQL APIs. In versions ...)
@@ -164,7 +164,7 @@ CVE-2026-41235 (Froxlor is open source server administration software. Version 2
CVE-2026-41234 (Froxlor is open source server administration software. Prior to versio ...)
- froxlor <itp> (bug #581792)
CVE-2026-41207 (The netty incubator codec.bhttp is a java language binary http parser. ...)
- TODO: check
+ NOT-FOR-US: netty-incubator-codec-ohttp
CVE-2026-41178 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1 ...)
TODO: check
CVE-2026-41065 (Tautulli is a Python based monitoring and tracking tool for Plex Media ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd2894bdc265b7f92715abaa8d090aef0fedd604
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd2894bdc265b7f92715abaa8d090aef0fedd604
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260605/4a248c7a/attachment.htm>
More information about the debian-security-tracker-commits
mailing list