CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/07/07 09:38:39
Modified files:
lib/libevent : Makefile event.h shlib_version
Removed files:
lib/libevent : event_tagging.c
Log message:
Do not ship evtag functions in base libevent.
Upstream libevent 2.1.13-stable contains several security fixes.
Our reduced libevent 1.4.15-stable does not contain the affected
code. The functions in event_tagging.c are only used by evrpc which
we have removed from libevent. As the attack vectors for the
upstream fixes go through evrpc to evtag, better remove this dead
code and do not export it in our libevent. Major library bump
needed.
OK dlg@ claudio@ sthen@
