[Git][security-tracker-team/security-tracker][master] Add CVE-2026-50161/libre

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eeb40dfc by Salvatore Bonaccorso at 2026-08-21T23:15:50+02:00
Add CVE-2026-50161/libre

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5944,7 +5944,10 @@ CVE-2026-50187 (Oh My Zsh is a community-driven framework for managing Zsh confi
 CVE-2026-50167 (Kurrier is a modern, self-hosted workspace for email, calendar, contac ...)
 	NOT-FOR-US: Kurrier
 CVE-2026-50161 (libre is a generic library for real-time communications with asynchron ...)
-	TODO: check
+	- libre <unfixed>
+	NOTE: https://github.com/baresip/re/security/advisories/GHSA-hvxv-v2gp-v93h
+	NOTE: https://github.com/baresip/re/pull/1584
+	NOTE: Fixed by: https://github.com/baresip/re/commit/718b92615c7963670d26c1a2b246968b58d782e8 (v4.8.1)
 CVE-2026-50143 (The Apify MCP server enables AI agents to extract data from websites u ...)
 	NOT-FOR-US: Apify MCP server
 CVE-2026-50139 (goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `Sh ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eeb40dfcb5737a80ae50e18fba6b4fb38fb7a33d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eeb40dfcb5737a80ae50e18fba6b4fb38fb7a33d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260821/91f3a57c/attachment.htm>