mbox series

[scarthgap,meta-oe,v2,0/2] libwebsockets: update to 4.3.10 and fix CVE-2026-19773

Message ID 20260923-update-libwebsockets-fix-cve-2026-19773-v2-0-d20d96496e90@bootlin.com
Headers show
Series libwebsockets: update to 4.3.10 and fix CVE-2026-19773 | expand

Message

Benjamin Robin (Schneider Electric) Sept. 23, 2026, 1:30 p.m. UTC 
This series updates libwebsockets to version 4.3.10 and also fixes the
CVE-2026-19773 by backporting the fix from v5 branch.

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
---
Changes in v2:
- Fixed the missing [scarthgap][meta-oe] tags
- Link to v1: https://patch.msgid.link/20260923-update-libwebsockets-fix-cve-2026-19773-v1-0-33878fcb7190@bootlin.com

---
Benjamin Robin (Schneider Electric) (2):
      libwebsockets: update to version 4.3.10
      libwebsockets: fix CVE-2026-19773

 .../libwebsockets/CVE-2025-11677.patch             | 161 ---------------------
 .../libwebsockets/CVE-2025-11678.patch             | 128 ----------------
 .../libwebsockets/CVE-2026-19773.patch             |  32 ++++
 ...websockets_4.3.3.bb => libwebsockets_4.3.10.bb} |   7 +-
 4 files changed, 35 insertions(+), 293 deletions(-)
---
base-commit: b5874ea07d69919d9b40d59f2c2f0bbd24bc3259
change-id: 20260923-update-libwebsockets-fix-cve-2026-19773-21cf90b878b3

Best regards,
--  
Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>