CLSA-2026-1790587734
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1790587734.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1790587734
- Upstream
- Published
- 2026-09-28T09:29:11Z
- Modified
- 2026-10-26T09:43:50Z
- Summary
- libevent: Fix of 8 CVEs
- Details
-
- Fix CVE-2026-63381 - use-after-free in evbuffer_add_buffer_reference()
- Fix CVE-2026-63385 - HTTP header injection via CR/LF in header values
- Fix CVE-2026-63382 - HTTP request smuggling via Transfer-Encoding handling and bare-LF chunk framing
- Fix CVE-2026-63379 - HTTP header smuggling via chunked trailers
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790587734.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-63379
- https://nvd.nist.gov/vuln/detail/CVE-2026-63381
- https://nvd.nist.gov/vuln/detail/CVE-2026-63382
- https://nvd.nist.gov/vuln/detail/CVE-2026-63383
- https://nvd.nist.gov/vuln/detail/CVE-2026-63384
- https://nvd.nist.gov/vuln/detail/CVE-2026-63385
- https://nvd.nist.gov/vuln/detail/CVE-2026-63387
- https://nvd.nist.gov/vuln/detail/CVE-2026-63388
Affected packages
TuxCare:AlmaLinux:9.6 / libevent
Package
- Name
- libevent
- Purl
- pkg:rpm/tuxcare/libevent?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / libevent-devel
Package
- Name
- libevent-devel
- Purl
- pkg:rpm/tuxcare/libevent-devel?distro=almalinux-9.6