Release date:
2026-09-24 12:12:46 UTC
Description:
* SECURITY UPDATE: integer overflow in evtag_unmarshal_header()
- debian/patches/CVE-2026-63384.patch: reject payload lengths above
INT_MAX in event_tagging.c, include/event2/tag.h
- CVE-2026-63384
* SECURITY UPDATE: out-of-bounds read in decode_tag_internal()
- debian/patches/CVE-2026-63383.patch: bound the tag decoding loop by the
pulled-up length instead of the full buffer length in event_tagging.c
- CVE-2026-63383
Updated packages:
-
libevent-2.1-6_2.1.8-stable-4build1+tuxcare.els1_amd64.deb
sha:9ed54f16199c94581620b6aa7f3abd339d78adc5
-
libevent-core-2.1-6_2.1.8-stable-4build1+tuxcare.els1_amd64.deb
sha:52a99a6a2d92e5e5d41a48ce7baf743ce8938d41
-
libevent-dev_2.1.8-stable-4build1+tuxcare.els1_amd64.deb
sha:425d1efd34016cd79f0950b92cc7a65f4c2c2e0e
-
libevent-extra-2.1-6_2.1.8-stable-4build1+tuxcare.els1_amd64.deb
sha:5badca898fb1b60c549e936eccf2623598e03ee7
-
libevent-openssl-2.1-6_2.1.8-stable-4build1+tuxcare.els1_amd64.deb
sha:7af3781d642972e4af1b1a15814d843b21fa34d8
-
libevent-pthreads-2.1-6_2.1.8-stable-4build1+tuxcare.els1_amd64.deb
sha:a491a006ff6792123d2b71555284bd6b8becf5e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
