[Git][security-tracker-team/security-tracker][master] new rabbitmq issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
88d69bbd by Moritz Muehlenhoff at 2026-06-14T00:46:28+02:00
new rabbitmq issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3882,7 +3882,10 @@ CVE-2026-43973 (Uncontrolled Resource Consumption vulnerability in ninenines gun
 CVE-2026-43972 (Origin Validation Error vulnerability in ninenines gun (gun_http2 modu ...)
 	NOT-FOR-US: gun
 CVE-2026-43966 (Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Reque ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: Appears to be bundled in rabbitmq-server	
+	NOTE: https://cna.erlef.org/cves/CVE-2026-43966.html
+	NOTE: https://github.com/ninenines/cowboy/commit/f77cb9b5e730e300fffb551db1ba5d1c4ed878ef
 CVE-2026-43951 (Out-of-bounds Read vulnerability in Apache HTTP Server with mod_header ...)
 	{DLA-4629-1}
 	- apache2 2.4.68-1 (bug #1139340)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/88d69bbddd8a3d78cbd4d85dec59e80dc7e7d002

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/88d69bbddd8a3d78cbd4d85dec59e80dc7e7d002
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260613/01a711f2/attachment.htm>