RHSA-2026:67908 — Security Advisory
Red Hat Security Advisory: libevent security update
Severity
ImportantRed Hat Product Security
Products
Official CSAF product identity
Published · September 16, 2026
Updated · November 2, 2026
Topic
An update for libevent is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The libevent packages provide an abstract asynchronous event notification library.
Security Fix(es):
-
libevent: Libevent: Denial of Service via malformed RPC data (CVE-2026-63383)
-
libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption (CVE-2026-63387)
-
libevent: Libevent: Denial of Service via integer conversion error in
evtag_unmarshal_header(CVE-2026-63384) -
libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling (CVE-2026-63382)
-
libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling (CVE-2026-63388)
-
libevent: Libevent: HTTP header handling bugs create risk of access control bypass. (CVE-2026-63385)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.