Important: Red Hat Security Advisory: libevent security update

An update for libevent is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`

A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...

libevent: libevent: Multiple HTTP Parser Bugs Enable Request Smuggling

A flaw was found in libevent. The evhttp parser in libevent's http.c component inconsistently handles HTTP Transfer-Encoding headers and chunked framing. This inconsistency allows an unauthenticated remote attacker to desynchronize request boundaries when libevent is used behind a proxy. Successf...

ROOT-OS-DEBIAN-11-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root

Root has patched CVE-2026-63385 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63384 CVE-2026-63384 in libevent - Patched by Root

Root has patched CVE-2026-63384 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63383 CVE-2026-63383 in libevent - Patched by Root

Root has patched CVE-2026-63383 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63382 CVE-2026-63382 in libevent - Patched by Root

Root has patched CVE-2026-63382 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63381 CVE-2026-63381 in libevent - Patched by Root

Root has patched CVE-2026-63381 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:11. Multiple fixed versions available...

libevent security update

2.1.13-1 - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385...

ALSA-2026:67908 Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...

Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...

Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...

libevent security update

2.1.13-1 - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385...

RHEL 9 : libevent (RHSA-2026:67910)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67910 advisory. The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service vi...

ALSA-2026:67909 Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...

RHEL 8 : libevent (RHSA-2026:67908)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67908 advisory. The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service vi...

RHEL 10 : libevent (RHSA-2026:67909)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67909 advisory. The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service v...

ALSA-2026:67910 Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...