mbox series

[0/2] libwebsockets: update to 4.3.10 and fix CVE-2026-19773

Message ID 20260923-update-libwebsockets-fix-cve-2026-19773-v1-0-33878fcb7190@bootlin.com
Headers show
Series libwebsockets: update to 4.3.10 and fix CVE-2026-19773 | expand

Message

Benjamin Robin (Schneider Electric) Sept. 23, 2026, 12:52 p.m. UTC 
This series updates libwebsockets to version 4.3.10 and also fixes the
CVE-2026-19773 by backporting the fix from v5 branch.

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
---
Benjamin Robin (Schneider Electric) (2):
      libwebsockets: update to version 4.3.10
      libwebsockets: fix CVE-2026-19773

 .../libwebsockets/CVE-2025-11677.patch             | 161 ---------------------
 .../libwebsockets/CVE-2025-11678.patch             | 128 ----------------
 .../libwebsockets/CVE-2026-19773.patch             |  32 ++++
 ...websockets_4.3.3.bb => libwebsockets_4.3.10.bb} |   7 +-
 4 files changed, 35 insertions(+), 293 deletions(-)
---
base-commit: b5874ea07d69919d9b40d59f2c2f0bbd24bc3259
change-id: 20260923-update-libwebsockets-fix-cve-2026-19773-21cf90b878b3

Best regards,
--  
Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>

Comments

Benjamin Robin (Schneider Electric) Sept. 23, 2026, 1:27 p.m. UTC | #1 
On Wednesday, September 23, 2026 at 2:52 PM, Benjamin Robin (Schneider Electric) wrote:
> This series updates libwebsockets to version 4.3.10 and also fixes the
> CVE-2026-19773 by backporting the fix from v5 branch.

Sorry, this series is for scarthgap, and I forgot to add the tags in the
subject. I am going to send a v2

> 
> Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
> ---
> Benjamin Robin (Schneider Electric) (2):
>       libwebsockets: update to version 4.3.10
>       libwebsockets: fix CVE-2026-19773
> 
>  .../libwebsockets/CVE-2025-11677.patch             | 161 ---------------------
>  .../libwebsockets/CVE-2025-11678.patch             | 128 ----------------
>  .../libwebsockets/CVE-2026-19773.patch             |  32 ++++
>  ...websockets_4.3.3.bb => libwebsockets_4.3.10.bb} |   7 +-
>  4 files changed, 35 insertions(+), 293 deletions(-)
> ---
> base-commit: b5874ea07d69919d9b40d59f2c2f0bbd24bc3259
> change-id: 20260923-update-libwebsockets-fix-cve-2026-19773-21cf90b878b3
> 
> Best regards,
> --  
> Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>