CVS: cvs.openbsd.org: src
Alexander Bluhm <[email protected]>
| Newsgroups | gmane.os.openbsd.cvs |
|---|---|
| Message-ID | <[email protected]> |
CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/07/07 09:38:39 Modified files: lib/libevent : Makefile event.h shlib_version Removed files: lib/libevent : event_tagging.c Log message: Do not ship evtag functions in base libevent. Upstream libevent 2.1.13-stable contains several security fixes. Our reduced libevent 1.4.15-stable does not contain the affected code. The functions in event_tagging.c are only used by evrpc which we have removed from libevent. As the attack vectors for the upstream fixes go through evrpc to evtag, better remove this dead code and do not export it in our libevent. Major library bump needed. OK dlg@ claudio@ sthen@