UbuntuUpdates.org

Package "libwebsockets"

Name: libwebsockets

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • lightweight C websockets library - development files
  • lightweight C websockets library
  • lightweight C websockets library
  • lightweight C websockets library
Latest version: 4.3.5-3ubuntu1.1
Release: resolute (26.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libwebsockets" in Resolute

Repository Area Version
base universe 4.3.5-3ubuntu1
security universe 4.3.5-3ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 4.3.5-3ubuntu1.1 2026-09-28 05:07:24 UTC

libwebsockets (4.3.5-3ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2026-10650.patch: ssh: plugin: add limit to resource
      exhaustion in plugins/ssh-base/sshd.c.
    - CVE-2026-10650
  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2026-78161.patch: cbor: overflow in lib/misc/lecp.c.
    - CVE-2026-78161

 -- Shishir Subedi Wed, 23 Sep 2026 11:39:00 +0545
CVE-2026-10650 A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_
CVE-2026-78161 A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP


About   -   Send Feedback to @ubuntu_updates