srt -- Multiple vulnerabilities

2026-07-21 · CVE-2026-55869, CVE-2026-55868 · VuXML entry

The SRT project reports: CVE-2026-55869: Heap-Based Buffer Overflow in KMREQ Handling. A remote attacker may be able to trigger a heap-based buffer overflow during key material request processing, leading to a denial of service or potentially arbitrary code execution. CVE-2026-55868: Encryption State Machine Downgrade. A flaw in the encryption state machine may allow an attacker to downgrade the negotiated …

Affected versions

• srt < 1.5.6

By system

1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.