Release date:
2026-10-21 20:41:21 UTC
Description:
- CVE-2026-63383: fix out-of-bounds read in decode_tag_internal
- CVE-2026-63384: reject payload lengths above INT_MAX in evtag_unmarshal_header
- CVE-2026-63387: fix off-by-one stack buffer overflow in dnsname_to_labels
- CVE-2026-63385: reject HTTP header values containing CR or LF
- CVE-2026-63382: reject ambiguous Transfer-Encoding/Content-Length headers and require CRLF in chunked framing
Updated packages:
-
libevent-2.0.21-4.el7.tuxcare.els2.aarch64.rpm
sha:5330077603d71cfe81646f168fa83706276d1023463aa349f7c5e65fa86cf009
-
libevent-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:f1f026db10af1343fcca2e07def1d32e6c712e24a862077cb31d5c5bb02db201
-
libevent-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:7c9f7fe0dce4d9825873560aca5f4b2187439cce037b5ca313041da313351d67
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.aarch64.rpm
sha:12d06184b1d3b43eb575e88d0797dcd9b8ade18dec57bb91ae11bb7fb69b3046
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:d4f40d45068a8c31fa10d7a5402420483bc522a98c1840ece8f8504b5b94b19a
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:bd02c097a95e8e62083fb2d841718f207943a2c7adc1845509fe1b1f97f6ce1a
-
libevent-doc-2.0.21-4.el7.tuxcare.els2.noarch.rpm
sha:b9f3c4ee3f6b461a7be1f6f6507dc75a80c7c969987b0ee150c4d8d19bac0ab8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
