PT-2026-97039

Name of the Vulnerable Software and Affected Versions SIPGO versions prior to 1.4.3 Description An unauthenticated WS or WSS peer can cause a denial of service in the server process. The issue occurs because WSConnection.Read in sip/transport ws.go creates a wsutil.Reader without setting...

chromium-browser: various fixes from internal audits

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...