Skip to content
Fedora 43 libevent Critical Security Fixes and Important Updates Released

Fedora 43 libevent Critical Security Fixes and Important Updates Released

Linuxsecurity •LinuxSecurity Advisories • September 11, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

The libevent API provides a mechanism to execute a callback function

when a specific event occurs on a file descriptor or after a timeout

has been reached. libevent is meant to replace the asynchronous event

loop found in event driven network servers. An application just needs

to call event_dispatch() and can then add or remove events dynamically

without having to change the event loop.

Update to 2.1.13. The following security vulnerabilites are fixed in this update: GHSA-fj29-64w6-73h6 CVE-2026-63383 GHSA-45c6-qx49-89m8 CVE-2026-63384 GHSA-cvq5-vrvr-j338 CVE-2026-63388 GHSA-58rx-7448-jw47 CVE-2026-63387 GHSA-2gmv-p5m7-98p6 CVE-2026-63379 GHSA-c2pj-cg4r-88c8 CVE-2026-63381 GHSA-q39v-w2g7-gr8j CVE-2026-63382 GHSA-jcwh-pvf2-73p2 CVE-2026-63385

* Mon Sep 7 2026 Fedor Vorobev - 2.1.13-1 - Update to 2.1.13. - The following security vulnerabilites are fixed in this update: - * GHSA-fj29-64w6-73h6 CVE-2026-63383 - * GHSA-45c6-qx49-89m8 CVE-2026-63384 - * GHSA-cvq5-vrvr-j338 CVE-2026-63388 - * GHSA-58rx-7448-jw47 CVE-2026-63387 - * GHSA-2gmv-p5m7-98p6 CVE-2026-63379 - * GHSA-c2pj-cg4r-88c8 CVE-2026-63381 - * GHSA-q39v-w2g7-gr8j CVE-2026-63382 - * GHSA-jcwh-pvf2-73p2 CVE-2026-63385

* Mon Sep 7 2026 Fedor Vorobev - 2.1.13-1 - Update to 2.1.13. - The following security vulnerabilites are fixed in this update: - * GHSA-fj29-64w6-73h6 CVE-2026-63383 - * GHSA-45c6-qx49-89m8 CVE-2026-63384 - * GHSA-cvq5-vrvr-j338 CVE-2026-63388 - * GHSA-58rx-7448-jw47 CVE-2026-63387 - * GHSA-2gmv-p5m7-98p6 CVE-2026-63379 - * GHSA-c2pj-cg4r-88c8 CVE-2026-63381 - * GHSA-q39v-w2g7-gr8j CVE-2026-63382 - * GHSA-jcwh-pvf2-73p2 CVE-2026-63385

[ 1 ] Bug #2495969 - libevent-2.1.13 is available [ 2 ] Bug #2526922 - CVE-2026-63379 libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning [fedora-all] [ 3 ] Bug #2527748 - CVE-2026-63382 libevent: libevent: Multiple HTTP Parser Bugs Enable Request Smuggling [fedora-all] [ 4 ] Bug #2527791 - CVE-2026-63385 libevent: Libevent: HTTP header handling bugs create risk of access control bypass. [fedora-all] [ 5 ] Bug #2527797 - CVE-2026-63381 libevent: Libevent: Memory corruption due to use-after-free [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-728dd9f704' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases