Rocky Linux 8 [CIQ] Security Update: libevent / libevent-debuginfo / libevent-debugsource / etc Multiple Vulnerabilities (crlsa-2026_67908)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667908 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

Rocky Linux 9.2 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1562)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261562 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2026-63383, CVE-2026-63384, CVE-2026-63385,...

Rocky Linux 9.6 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1554)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261554 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2026-63382, CVE-2026-63383, CVE-2026-63384,...

Rocky Linux 9 [CIQ] Security Update: libevent / libevent-debuginfo / libevent-debugsource / etc Multiple Vulnerabilities (crlsa-2026_67910)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667910 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

AlmaLinux 9.6 [TuxCare] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790587734)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790587734 advisory. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c...

Rocky Linux 9.6 [TuxCare] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790587734)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790587734 advisory. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libevent vulnerabilities (USN-8840-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8840-1 advisory. Micha Majchrowicz and Marcin Wyczechowski discovered that libevent incorrectly...

CentOS Linux 7 [TuxCare] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1739388106)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1739388106 advisory. - The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involvi...

TencentOS Server 4: libevent (TSSA-2026:1051)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1051 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

USN-8840-1: libevent vulnerabilities

Michał Majchrowicz and Marcin Wyczechowski discovered that libevent incorrectly handled certain DNS responses. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-63387 It was discovered that libevent incorrectly handled certain...

USN-8840-1 libevent vulnerabilities

Michał Majchrowicz and Marcin Wyczechowski discovered that libevent incorrectly handled certain DNS responses. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-63387 It was discovered that libevent incorrectly handled certain...

CLSA-2026-1790587734 libevent: Fix of 8 CVEs

Fix CVE-2026-63381 - use-after-free in evbufferaddbufferreference - Fix CVE-2026-63385 - HTTP header injection via CR/LF in header values - Fix CVE-2026-63382 - HTTP request smuggling via Transfer-Encoding handling and bare-LF chunk framing - Fix CVE-2026-63379 - HTTP header smuggling via chunked...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124532 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124531 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124536 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124533 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in eventtagging.c when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124537 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding...

MiracleLinux 9 : libevent-2.1.13-1.el9_8 (AXSA:2026-1905:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1905:02 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial o...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124534 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libevent: libevent-2.1.13-1.hum1 aarch64, x8664 libevent-devel-2.1.13-1.hum1 aarch64, x8664 libevent-doc-2.1.13-1.hum1 noarch libevent-2.1.13-1.hum1.src src...