AZL-96906 CVE-2026-63384 affecting package libtevent 0.14.1-1

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader uses evtagdecodeint to decode an attacker-controlled uint32 payload length and returns it as a signed int. Values above INTMAX becom...

[slackware-security] libevent

New libevent packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libevent-2.1.13-i586-1slack15.0.txz: Upgraded. This release contains several security fixes, affecting users of the following module...

PT-2026-76582

Name of the Vulnerable Software and Affected Versions Libevent versions prior to 2.1.13 Libevent versions prior to 2.2.2-alpha Description An incorrect integer conversion occurs in event tagging.c when the evtag unmarshal header function uses evtag decode int to decode a uint32 payload length...