CVE-2026-63383

In libevent prior to 2.1.13 and 2.2.2-alpha, decode_tag_internal() in event_tagging.c requests at most five bytes via evbuffer_pullup but iterates over the full logical buffer length. A fragmented evbuffer holding a six-byte malformed tag can advance past the pullup window, causing an out-of-boun...

Linux Distros Unpatched Vulnerability : CVE-2026-45870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which...