Release date:
2026-09-28 09:29:11 UTC
Description:
- Fix CVE-2026-63381 - use-after-free in evbuffer_add_buffer_reference()
- Fix CVE-2026-63385 - HTTP header injection via CR/LF in header values
- Fix CVE-2026-63382 - HTTP request smuggling via Transfer-Encoding
handling and bare-LF chunk framing
- Fix CVE-2026-63379 - HTTP header smuggling via chunked trailers
Updated packages:
-
libevent-2.1.12-8.el9_6.tuxcare.els2.aarch64.rpm
sha:1c0360694a4feb505d343a62dc13cb272b31c732a83f1a19ed959cc4691ff593
-
libevent-2.1.12-8.el9_6.tuxcare.els2.i686.rpm
sha:e92fbb22adaa340490ed81238b8142ca809206a3df2c459f226fa2df4bc7a9c6
-
libevent-2.1.12-8.el9_6.tuxcare.els2.x86_64.rpm
sha:90e0714eed8f59e75ad84dec2ffb53795dace8b92f05918c7c0eae0ca74e9e65
-
libevent-devel-2.1.12-8.el9_6.tuxcare.els2.aarch64.rpm
sha:e95d6f2cd7b86c008707b95a93d45460725bbd1e15841387b21d9659d35df7cb
-
libevent-devel-2.1.12-8.el9_6.tuxcare.els2.i686.rpm
sha:b0864f7200106d8d37a75176d9331edf062d2bfe2afcef91dda647a622937688
-
libevent-devel-2.1.12-8.el9_6.tuxcare.els2.x86_64.rpm
sha:d2a1d0ee26f30a81372fa117fe24d97769b6e0b9ec04f2e96d11f7a19cc5faa7
-
libevent-doc-2.1.12-8.el9_6.tuxcare.els2.noarch.rpm
sha:a702e0ecd9d2e771bc4812d560ce5125e2778abc34b6046ab6048fb33b85b17b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
