Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
65883383 by Salvatore Bonaccorso at 2026-08-21T06:46:13+02:00
Add first batch of libevent issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -355,11 +355,19 @@ CVE-2026-63383 (Libevent is an event notification
library. Prior to 2.1.13 and 2
CVE-2026-63382 (Libevent is an event notification library. Prior to 2.1.13 and
2.2.2-a ...)
TODO: check
CVE-2026-63381 (Libevent is an event notification library. Prior to 2.1.13 and
2.2.2-a ...)
- TODO: check
+ - libevent 2.1.13-stable-1
+ NOTE:
https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8
+ NOTE: Fixed by:
https://github.com/libevent/libevent/commit/5cb95ba2f804f8aff46f88d58391c71e1251cd1c
(release-2.1.13-stable)
+ NOTE: Fixed by:
https://github.com/libevent/libevent/commit/9db091b04f569be3a700fa9860ef02f90b830af9
(release-2.2.2-alpha)
CVE-2026-63380 (Libevent is an event notification library. Prior to
2.2.2-alpha, libev ...)
- TODO: check
+ - libevent <not-affected> (Vulnerable code not present)
+ NOTE:
https://github.com/libevent/libevent/security/advisories/GHSA-3rpf-frgx-xq34
+ NOTE: Fixed by:
https://github.com/libevent/libevent/commit/825c18bd99f556b59d61200523237f264d5cc734
(release-2.2.2-alpha)
CVE-2026-63379 (Libevent is an event notification library. Prior to 2.1.13 and
2.2.2-a ...)
- TODO: check
+ - libevent 2.1.13-stable-1
+ NOTE:
https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6
+ NOTE: Fixed by:
https://github.com/libevent/libevent/commit/87e8e44fa774e9677b089b1a5114ee68aefa1636
(release-2.1.13-stable)
+ NOTE: Fixed by:
https://github.com/libevent/libevent/commit/b847071141b3827900d536594ec9045eb0a4c485
(release-2.2.2-alpha)
CVE-2026-63044 (Server-Side Request Forgery (SSRF) vulnerability in Apache
InLong.Any ...)
TODO: check
CVE-2026-63043 (Relative Path Traversal vulnerability in Apache
InLong.Arbitrary file ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/658833837584513792aeae7b2fab48770ace0e0e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/658833837584513792aeae7b2fab48770ace0e0e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
