[Git][security-tracker-team/security-tracker][master] libwebsockets fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ddcf9099 by Moritz Muehlenhoff at 2026-09-28T10:50:19+02:00
libwebsockets fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18155,7 +18155,7 @@ CVE-2026-19774 (BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vul
 	NOTE: https://github.com/bluez/bluez/pull/2251
 	NOTE: Fixed by: https://github.com/bluez/bluez/commit/912f5efb0dd9bb08e408d33371a57182c5678aef (5.87)
 CVE-2026-19773 (libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Rem ...)
-	- libwebsockets <unfixed> (bug #1149178)
+	- libwebsockets 4.3.5-7 (bug #1149178)
 	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-26-590/
 	NOTE: Fixed by: https://github.com/warmcat/libwebsockets/commit/824151862f37bc72f46d9a3e01d5b9408d313a0b (v5.0.0)
 CVE-2026-19641 (On affected platforms running Arista EOS with password authentication  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddcf909930a2f86bbd545fc3b41170777c8d392d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddcf909930a2f86bbd545fc3b41170777c8d392d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/33625829/attachment.htm>