[Git][security-tracker-team/security-tracker][master] Add note for CVE-2026-107230

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc58d08b by Salvatore Bonaccorso at 2026-10-09T07:06:49+02:00
Add note for CVE-2026-107230

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -453,6 +453,9 @@ CVE-2026-107230 (The AsyncHttpClient (AHC) library allows Java applications to e
 	- sync-http-client <unfixed> (bug #1150331)
 	NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-v2j5-22fr-j62r
 	NOTE: https://github.com/AsyncHttpClient/async-http-client/commit/d3bb4d68b41acf5d3ab7541afa9fdfe7ec3ba054 (async-http-client-project-3.0.14)
+	NOTE: 4 cases of issues, where a the first set 1-3 is covered by GHSA-vvp4-63h8-v5pm.
+	NOTE: The fourth case (Any login on a SOCKS or CONNECT proxy) will not be fixed in the 2.x line
+	NOTE: (end-of-life) and needs an upgrade to at least 3.0.14
 CVE-2026-107229 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
 	- sync-http-client <unfixed> (bug #1150331)
 	NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qjr7-w8pj-pmv9



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc58d08bfb6e62edb4f40d6e23d79bd2fcb4ade6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc58d08bfb6e62edb4f40d6e23d79bd2fcb4ade6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/b2863824/attachment.htm>