[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-43966

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c0648d8 by Salvatore Bonaccorso at 2026-09-26T12:51:33+02:00
Update status for CVE-2026-43966

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -116915,13 +116915,15 @@ CVE-2026-43973 (Uncontrolled Resource Consumption vulnerability in ninenines gun
 CVE-2026-43972 (Origin Validation Error vulnerability in ninenines gun (gun_http2 modu ...)
 	NOT-FOR-US: gun
 CVE-2026-43966 (Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Reque ...)
+	- erlang-cowboy 2.16.1+dfsg-1
 	- rabbitmq-server <unfixed>
 	[trixie] - rabbitmq-server <no-dsa> (Minor issue)
 	[bookworm] - rabbitmq-server <postponed> (Minor issue, response splitting, mitigations exist)
 	[bullseye] - rabbitmq-server <postponed> (Minor issue, response splitting, mitigations exist)
 	NOTE: Appears to be bundled in rabbitmq-server
 	NOTE: https://cna.erlef.org/cves/CVE-2026-43966.html
-	NOTE: https://github.com/ninenines/cowboy/commit/f77cb9b5e730e300fffb551db1ba5d1c4ed878ef
+	NOTE: https://osv.dev/vulnerability/EEF-CVE-2026-43966
+	NOTE: https://github.com/ninenines/cowboy/commit/f77cb9b5e730e300fffb551db1ba5d1c4ed878ef (2.16.0)
 CVE-2026-43951 (Out-of-bounds Read vulnerability in Apache HTTP Server with mod_header ...)
 	{DLA-4629-1}
 	- apache2 2.4.68-1 (bug #1139340)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c0648d8d2b63d3627979f79941f80fa08bd41bc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c0648d8d2b63d3627979f79941f80fa08bd41bc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260926/032426c1/attachment.htm>