Release date:
2026-10-20 23:00:22 UTC
Description:
- CVE-2026-63383: fix out-of-bounds read in decode_tag_internal
- CVE-2026-63384: reject payload lengths above INT_MAX in evtag_unmarshal_header
- CVE-2026-63387: fix off-by-one stack buffer overflow in dnsname_to_labels
- CVE-2026-63385: reject HTTP header values containing CR or LF
- CVE-2026-63382: reject ambiguous Transfer-Encoding/Content-Length headers and require CRLF in chunked framing
Updated packages:
-
libevent-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:41d6ce158ad87178f31d227f1f42d6d16a5b642a724792906e781480a1d95ab4
-
libevent-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:2f690e957890178f067187d3a4c3acd16c5b4f04d3f644b47c308166ffeba718
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:7fb829b54ad8b5afe0225c3e15d17e583508d6d2ac85a24858a905ac45318f43
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:cbd553fb27159f987154d4a70c46c460dc7727da485ce24ce8ae8b96f6877cc3
-
libevent-doc-2.0.21-4.el7.tuxcare.els2.noarch.rpm
sha:ddee3b5e2537cf5b27608b815dbab2453e746fa14273403714abb16c8c8b79da
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
