Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc58d08b by Salvatore Bonaccorso at 2026-10-09T07:06:49+02:00
Add note for CVE-2026-107230
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -453,6 +453,9 @@ CVE-2026-107230 (The AsyncHttpClient (AHC) library allows
Java applications to e
- sync-http-client <unfixed> (bug #1150331)
NOTE:
https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-v2j5-22fr-j62r
NOTE:
https://github.com/AsyncHttpClient/async-http-client/commit/d3bb4d68b41acf5d3ab7541afa9fdfe7ec3ba054
(async-http-client-project-3.0.14)
+ NOTE: 4 cases of issues, where a the first set 1-3 is covered by
GHSA-vvp4-63h8-v5pm.
+ NOTE: The fourth case (Any login on a SOCKS or CONNECT proxy) will not
be fixed in the 2.x line
+ NOTE: (end-of-life) and needs an upgrade to at least 3.0.14
CVE-2026-107229 (The AsyncHttpClient (AHC) library allows Java applications to
easily e ...)
- sync-http-client <unfixed> (bug #1150331)
NOTE:
https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qjr7-w8pj-pmv9
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc58d08bfb6e62edb4f40d6e23d79bd2fcb4ade6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc58d08bfb6e62edb4f40d6e23d79bd2fcb4ade6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
