[CLSA-2026:1789733643] libevent: Fix of 5 CVEs
Type:
security
Severity:
None
Release date:
2026-09-18 12:14:11 UTC
Description:
- Rebase onto Amazon Linux 2 libevent-2.0.21-4.amzn2.0.4 - CVE-2026-63383: fix out-of-bounds read in decode_tag_internal (vendor fix) - CVE-2026-63384: fix integer overflow in evtag_unmarshal_header (vendor fix) - CVE-2016-10195: fix remote stack overread in evdns name_parse() - CVE-2016-10196: fix stack-based buffer overflow in evutil_parse_sockaddr_port - CVE-2016-10197: fix DoS via empty hostname in search_make_new
Updated packages:
  • libevent-2.0.21-4.amzn2.0.4.tuxcare.els1.i686.rpm
    sha:d3089d2575112feee219753ccdf1beff519ac8c7250ddd0d3b1359e0bf31b8df
  • libevent-2.0.21-4.amzn2.0.4.tuxcare.els1.x86_64.rpm
    sha:da694ae7e5c8ab6d0760da27e50bf2f7efe56f2d80bdac092b0017e53bbf813e
  • libevent-devel-2.0.21-4.amzn2.0.4.tuxcare.els1.x86_64.rpm
    sha:7a893d14231af778c6d4fc8cf7a2f4b7bb4e54041162f539a2d8c89115341f4a
  • libevent-doc-2.0.21-4.amzn2.0.4.tuxcare.els1.noarch.rpm
    sha:78ecf121f6def93b4275f8ecc7951871411625c5a0049a464be6f5a1b22aa729
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.