UbuntuUpdates.org

Package "libwebsockets-evlib-ev"

Name: libwebsockets-evlib-ev

Description:

lightweight C websockets library
Latest version: 4.3.5-3ubuntu1.1
Release: resolute (26.04)
Level: updates
Repository: universe
Head package: libwebsockets
Homepage: https://libwebsockets.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libwebsockets-evlib-ev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libwebsockets-evlib-ev" in Resolute

Repository Area Version
base universe 4.3.5-3ubuntu1
security universe 4.3.5-3ubuntu1.1

Changelog

Version: 4.3.5-3ubuntu1.1 2026-09-28 05:07:24 UTC

libwebsockets (4.3.5-3ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2026-10650.patch: ssh: plugin: add limit to resource
      exhaustion in plugins/ssh-base/sshd.c.
    - CVE-2026-10650
  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2026-78161.patch: cbor: overflow in lib/misc/lecp.c.
    - CVE-2026-78161

 -- Shishir Subedi Wed, 23 Sep 2026 11:39:00 +0545
CVE-2026-10650 A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_
CVE-2026-78161 A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP


About   -   Send Feedback to @ubuntu_updates