{"schema_version":"1.7.2","id":"OESA-2026-3268","modified":"2026-08-07T02:42:54Z","published":"2026-08-07T02:42:54Z","upstream":["CVE-2026-63379","CVE-2026-63381","CVE-2026-63382","CVE-2026-63383","CVE-2026-63384","CVE-2026-63385","CVE-2026-63387","CVE-2026-63388"],"summary":"libevent security update","details":"Libevent additionally provides a sophisticated framework for buffered network IO, with support for sockets, filters, rate-limiting, SSL, zero-copy file transmission, and IOCP. Libevent includes support for several useful protocols, including DNS, HTTP, and a minimal RPC framewor.\r\n\r\nSecurity Fix(es):\n\nThe updated packages fix some security vulnerabilities. libevent is a lightweight event notification library used for handling event loops and callback mechanisms, widely used in network applications.(CVE-2026-63379)\n\nThe updated packages fix some security vulnerabilities affecting the libevent library.(CVE-2026-63381)\n\nThe updated packages fix some security vulnerabilities.(CVE-2026-63382)\n\nThe updated packages fix some security vulnerabilities.(CVE-2026-63383)\n\nThe updated packages fix some security vulnerabilities.(CVE-2026-63384)\n\nThe updated packages fix some security vulnerabilities.(CVE-2026-63385)\n\nThe updated packages fix some security vulnerabilities.(CVE-2026-63387)\n\nThe updated packages fix some security vulnerabilities.(CVE-2026-63388)","affected":[{"package":{"ecosystem":"openEuler:24.03-LTS-SP4","name":"libevent","purl":"pkg:rpm/openEuler/libevent&distro=openEuler-24.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.12-17.oe2403sp4"}]}],"ecosystem_specific":{"aarch64":["libevent-2.1.12-17.oe2403sp4.aarch64.rpm","libevent-debuginfo-2.1.12-17.oe2403sp4.aarch64.rpm","libevent-debugsource-2.1.12-17.oe2403sp4.aarch64.rpm","libevent-devel-2.1.12-17.oe2403sp4.aarch64.rpm"],"src":["libevent-2.1.12-17.oe2403sp4.src.rpm"],"x86_64":["libevent-2.1.12-17.oe2403sp4.x86_64.rpm","libevent-debuginfo-2.1.12-17.oe2403sp4.x86_64.rpm","libevent-debugsource-2.1.12-17.oe2403sp4.x86_64.rpm","libevent-devel-2.1.12-17.oe2403sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:20.03-LTS-SP4","name":"libevent","purl":"pkg:rpm/openEuler/libevent&distro=openEuler-20.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.12-7.oe2003sp4"}]}],"ecosystem_specific":{"aarch64":["libevent-2.1.12-7.oe2003sp4.aarch64.rpm","libevent-debuginfo-2.1.12-7.oe2003sp4.aarch64.rpm","libevent-debugsource-2.1.12-7.oe2003sp4.aarch64.rpm","libevent-devel-2.1.12-7.oe2003sp4.aarch64.rpm"],"src":["libevent-2.1.12-7.oe2003sp4.src.rpm"],"x86_64":["libevent-2.1.12-7.oe2003sp4.x86_64.rpm","libevent-debuginfo-2.1.12-7.oe2003sp4.x86_64.rpm","libevent-debugsource-2.1.12-7.oe2003sp4.x86_64.rpm","libevent-devel-2.1.12-7.oe2003sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:22.03-LTS-SP4","name":"libevent","purl":"pkg:rpm/openEuler/libevent&distro=openEuler-22.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.12-11.oe2203sp4"}]}],"ecosystem_specific":{"aarch64":["libevent-2.1.12-11.oe2203sp4.aarch64.rpm","libevent-debuginfo-2.1.12-11.oe2203sp4.aarch64.rpm","libevent-debugsource-2.1.12-11.oe2203sp4.aarch64.rpm","libevent-devel-2.1.12-11.oe2203sp4.aarch64.rpm"],"src":["libevent-2.1.12-11.oe2203sp4.src.rpm"],"x86_64":["libevent-2.1.12-11.oe2203sp4.x86_64.rpm","libevent-debuginfo-2.1.12-11.oe2203sp4.x86_64.rpm","libevent-debugsource-2.1.12-11.oe2203sp4.x86_64.rpm","libevent-devel-2.1.12-11.oe2203sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP1","name":"libevent","purl":"pkg:rpm/openEuler/libevent&distro=openEuler-24.03-LTS-SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.12-17.oe2403sp1"}]}],"ecosystem_specific":{"aarch64":["libevent-2.1.12-17.oe2403sp1.aarch64.rpm","libevent-debuginfo-2.1.12-17.oe2403sp1.aarch64.rpm","libevent-debugsource-2.1.12-17.oe2403sp1.aarch64.rpm","libevent-devel-2.1.12-17.oe2403sp1.aarch64.rpm"],"src":["libevent-2.1.12-17.oe2403sp1.src.rpm"],"x86_64":["libevent-2.1.12-17.oe2403sp1.x86_64.rpm","libevent-debuginfo-2.1.12-17.oe2403sp1.x86_64.rpm","libevent-debugsource-2.1.12-17.oe2403sp1.x86_64.rpm","libevent-devel-2.1.12-17.oe2403sp1.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS-SP3","name":"libevent","purl":"pkg:rpm/openEuler/libevent&distro=openEuler-24.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.12-17.oe2403sp3"}]}],"ecosystem_specific":{"aarch64":["libevent-2.1.12-17.oe2403sp3.aarch64.rpm","libevent-debuginfo-2.1.12-17.oe2403sp3.aarch64.rpm","libevent-debugsource-2.1.12-17.oe2403sp3.aarch64.rpm","libevent-devel-2.1.12-17.oe2403sp3.aarch64.rpm"],"src":["libevent-2.1.12-17.oe2403sp3.src.rpm"],"x86_64":["libevent-2.1.12-17.oe2403sp3.x86_64.rpm","libevent-debuginfo-2.1.12-17.oe2403sp3.x86_64.rpm","libevent-debugsource-2.1.12-17.oe2403sp3.x86_64.rpm","libevent-devel-2.1.12-17.oe2403sp3.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3268"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63379"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63381"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63382"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63383"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63384"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63385"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63387"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63388"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"database_specific":{"severity":"High"}}