[CLSA-2026:1791302296] Fix CVE(s): CVE-2026-63387
Type:
security
Severity:
Important
Release date:
2026-10-06 15:58:26 UTC
Description:
* SECURITY UPDATE: off-by-one stack overflow in dnsname_to_labels() - debian/patches/CVE-2026-63387.patch: fail instead of writing the terminating zero label past the end of the buffer in evdns.c - CVE-2026-63387
CVEs fixed:
Updated packages:
  • libevent-2.1-6_2.1.8-stable-4build1+tuxcare.els2_amd64.deb
    sha:3d3d44efd723cd5a91d66c42c019d821a58ef526
  • libevent-core-2.1-6_2.1.8-stable-4build1+tuxcare.els2_amd64.deb
    sha:b4d3ee66022af79e679cb0e707eb616324206dc1
  • libevent-dev_2.1.8-stable-4build1+tuxcare.els2_amd64.deb
    sha:65b1f256fa01a49593b3f2ea1bbb38a4934ae7a3
  • libevent-extra-2.1-6_2.1.8-stable-4build1+tuxcare.els2_amd64.deb
    sha:a03522edb86d304e27950a79e7f431d612d3dc6c
  • libevent-openssl-2.1-6_2.1.8-stable-4build1+tuxcare.els2_amd64.deb
    sha:df61bb0b10e592c2fa11f5333e1165c1c5722d69
  • libevent-pthreads-2.1-6_2.1.8-stable-4build1+tuxcare.els2_amd64.deb
    sha:20ba6865aa761d68b2582debc2826e8959a26e4a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.