tocsin

Debian/libevent: unknown

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttp_decode_uri_internal decodes percent-encoded %00 bytes into litera

Action: Upgrade libevent to 2.1.12-stable-8+deb12u1 or later.

Affected

introducedfixedlast affected
02.1.12-stable-8+deb12u1-

Fixed versions

2.1.12-stable-8+deb12u1

Sources

published · modified · JSON