./devel/libevent, Asynchronous event notification library

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ]

Branch: CURRENT, Version: 2.1.13, Package name: libevent-2.1.13, Maintainer: pkgsrc-users

The libevent API provides a mechanism to execute a callback function
when a specific event occurs on a file descriptor or after a timeout
has been reached. Furthermore, libevent also support callbacks due
to signals or regular timeouts.

libevent is meant to replace the asynchronous event loop found in
event driven network servers. An application just needs to call
event_dispatch() and can then add or remove events dynamically
without having to change the event loop.

Currently, libevent supports /dev/poll, kqueue(2), event ports,
select(2), poll(2), and epoll(4). The internal event mechanism is
completely independent of the exposed event API, and a simple update
of libevent can provide new functionality without having to redesign
the applications.

Libevent additionally provides a sophisticated framework for buffered
network IO, with support for sockets, filters, rate-limiting, SSL,
zero-copy file transmission, and IOCP. Libevent includes support
for several useful protocols, including DNS, HTTP, and a minimal
RPC framework.


Required to run:
[security/openssl]

Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 1100.122 KB

Version history: (Expand)

CVS history: (Expand)


   2026-07-01 23:14:26 by Thomas Klausner | Files touched by this commit (4) | Package updated
Log message:
libevent: update to 2.1.13.

Fix pkglint while here.

Changes in version 2.1.13-stable (01 July 2026)

 This release contains several security fixes, affecting users of the
 following modules: evbuffer, bufferevent, evtag, evrpc, evdns, evhttp.
 If you have a program that uses one of those modules,
 or if you distribute libevent, you should upgrade.

 Additionally, this release backports some small modernizations to
 the libevent codebase, to aid in compiling with the compilers
 released over the last few years.

 Security Fixes (evtag, evrpc):
 - Fix an out-of-bounds read in decode_tag_internal.
   (Found by @Brubbish. GHSA-fj29-64w6-73h6)
 - Fix an integer overflow in evtag_unmarshal_header.
   (Found by @Brubbish. GHSA-45c6-qx49-89m8)

 Security Fixes (evhttp):
 - Discard HTTP trailers, to prevent header smuggling attacks.
   (Found by @sebastianosrt. GHSA-2gmv-p5m7-98p6)
 - Restrict HTTP header parsing to prevent request smuggling.
   (Originally reported by @xclow3n; and then by @kodareef5,
   @nstaller0490, @AsafMeizneer, and @yaotushaozhu.
   GHSA-q39v-w2g7-gr8j.)
 - Treat CRLF and %00 more strictly in HTTP headers, to prevent
   parser mismatch attacks.
   (Reported by @xclow3n and @AsafMeizner. See GHSA-q39v-w2g7-gr8j,
   GHSA-jcwh-pvf2-73p2.)
 - Fix a heap out-of-bound write that could occur when using
   AF_UNIX sockets and compiling libevent with -DNDEBUG.
   (Found by @mat-mo. GHSA-cvq5-vrvr-j338)

 Security fixes (evbuffer, bufferevent):
 - Fixed a dangling pointer in evbuffer_add_reference.
   (Found by @DarkaMaul. GHSA-c2pj-cg4r-88c8)

 Security fixes (evdns):
 - Fix an out-of-bounds write in dnsname_to_labels
   when building a DNS response of 2^16 bytes.
   (Found by @sectroyer. GHSA-58rx-7448-jw47)

 Security fixes (example code):
 - Avoid using strcpy() in sample/http-server.c.
   (Reported by @sectroyer. GHSA-5rgj-2c58-7jrc.)

 Other fixes:
 - Backport fixes for numerous compiler warnings.
 - Backport fixes for compilation with openssl 3 and later.
   2025-10-05 09:14:37 by Thomas Klausner | Files touched by this commit (1) 
Log message:
libevent: make sure OPSYS is defined before checking it
   2025-10-05 04:53:06 by Jonathan Schleifer | Files touched by this commit (1) 
Log message:
devel/libevent: Same change for buildlink3.mk
   2025-10-05 04:49:44 by Jonathan Schleifer | Files touched by this commit (2) 
Log message:
devel/libevent: Build without OpenSSL on QNX
   2024-03-15 19:07:32 by Nia Alarie | Files touched by this commit (1) 
Log message:
libevent: Do not attempt to use the broken poll/kqueue in old Darwin.
   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2297) 
Log message:
*: bump for openssl 3
   2023-07-30 23:28:27 by Tobias Nygren | Files touched by this commit (1) 
Log message:
libevent: disable epoll(2) on NetBSD too
   2022-01-11 10:14:00 by Amitai Schleier | Files touched by this commit (2) 
Log message:
Solaris 11 build with SunPro fails ('unexpected "("') if we use its
__has_attribute, so let's not.