Release date:
2026-10-23 23:37:58 UTC
Description:
- CVE-2026-63383: fix out-of-bounds read in decode_tag_internal
- CVE-2026-63384: reject payload lengths above INT_MAX in evtag_unmarshal_header
- CVE-2026-63387: fix off-by-one stack buffer overflow in dnsname_to_labels
- CVE-2026-63385: reject HTTP header values containing CR or LF
- CVE-2026-63382: reject ambiguous Transfer-Encoding/Content-Length headers and require CRLF in chunked framing
Updated packages:
-
libevent-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:923ada90837ab9f643f9c3a1676f1306e0845d6577d3f58bbba77240b272fbb0
-
libevent-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:7ee5e8d42080787820912f5f404121ab5945a2b43a0f5ecfcb2c4b16935f26e9
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.i686.rpm
sha:3df72b11d6c7b66d9ea926b4b3ad2f9c50efa0f53d76c96bdfb67d6211a8542a
-
libevent-devel-2.0.21-4.el7.tuxcare.els2.x86_64.rpm
sha:0f0d5a404301f9b420850a34db48b6183170336c53dba441d6f9996f4d5f2714
-
libevent-doc-2.0.21-4.el7.tuxcare.els2.noarch.rpm
sha:92b92383d1197a6a7bf7aa49749fc9d2c28952259431190f3d75dc1626d14c2a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
