Release date:
2026-10-20 22:49:53 UTC
Description:
- CVE-2026-63383: fix out-of-bounds read in decode_tag_internal
- CVE-2026-63384: reject payload lengths above INT_MAX in evtag_unmarshal_header
- CVE-2026-63387: fix off-by-one stack buffer overflow in dnsname_to_labels
- CVE-2026-63385: reject HTTP header values containing CR or LF
- CVE-2026-63382: reject ambiguous Transfer-Encoding/Content-Length headers and require CRLF in chunked framing
Updated packages:
-
libevent-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:4d9aec7d27281075a6d98d2c133969d77c54a15d59bf6e78b24f83bf7b40cff0
-
libevent-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:6e6da0b31866e0faed89032a286e5c94c5c072bff08fa7f8633b0afdfe92bda6
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:b9756fa2c04ffbf5006a6e7112286a889b33c07f6b4e81eac86c9fe034a09e46
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:fdc7ff6dd43f2b10433f15e4c330369b26d34447cd0dd627cc7b101d720d2bcf
-
libevent-doc-2.0.21-4.el7.tuxcare.els2.noarch.rpm
sha:2f42b9025cbde486590c56859988df1afab2e8e20fa0f48103c7258314ded2d0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
