> Debian DSA-6222-1 ngtcp2 Important Buffer Overflow CVE-2026-40170
[DATE: 21/04/2026 18:29]
[LANGUAGE: EN]
Zou Dikai discovered a buffer overflow in ngtcp2, a QUIC protocol library. For the oldstable distribution (bookworm), this problem has been fixed in version 0.12.1+dfsg-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 1.11.0-1+deb13u1.