-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 27 Oct 2025 18:31:12 +0100
Source: libwebsockets
Architecture: source
Version: 4.3.5-3
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Closes: 1118746 1118747
Changes:
libwebsockets (4.3.5-3) unstable; urgency=high
.
* Backport upstream security fix for CVE-2025-11677: use after free in
lws_handshake_server() (closes: #1118747).
* Backport upstream security fix for CVE-2025-11678: stack-based buffer
overflow in lws_adns_parse_label() (closes: #1118746).
Checksums-Sha1:
100d01530957595ce933368b3c1c470eeff3dca1 2572 libwebsockets_4.3.5-3.dsc
9f08943916f369bdba3ab6f74102bdd41d56a352 22584 libwebsockets_4.3.5-3.debian.tar.xz
Checksums-Sha256:
1664627384d69cd1a8aee21fac332e736229d0666496e52690cf35474cd940b5 2572 libwebsockets_4.3.5-3.dsc
beb50bd662ada04b594d623cfc24d9c57f0f05a1b5e8cb63c9c7f47d7797f333 22584 libwebsockets_4.3.5-3.debian.tar.xz
Files:
e8abed5fb54b7d1561e132d34aa43e7a 2572 libs optional libwebsockets_4.3.5-3.dsc
3ad74f640f18d8bb93ddf0782b2b12a2 22584 libs optional libwebsockets_4.3.5-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIyBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmj/zTcACgkQ3OMQ54ZM
yL8TAA/4oHC9dKbXenHof91YeqmLag4asyPyMGihF9c4IFf+MUYmmJ7394v2eW8c
+I8OaBo0BmtEEMHcQTy7WTwvAY04SucH69bmoyJT6KT3atFOU7XGMrrounsedsXG
VQDZWFYqp1LrsSGKQ+SP/2VVROOOk6+VDmnNuFnb05fZJzHLo3g5GiQRZv1h/Sqr
P5PiHQ4hSxhaXeXTArp9CBfp47r8ZmZic1JlBCK8PXuCVnYf7A7Ac+D3IbeO0yME
8JfOutBg/GekUpNjBZw0FTBcGWJKmtd9Vze/FwC/QI+j+41/y//7fMzdM8q6CLC8
G49YEtVzAk/Gy7W6H12CVbXrloD1xgWwjCv+4ix5toyhGAz5t22L2xajEOJ3o7+5
d0tddIRt6qAfcl45oW0X294L7kh/D0g+PVuYSWMwAg/SFg/FCzR+tk1Gh+hvgotu
WygFm0Mpl3MdVIarb5S49ah+jmf/PyE0GWk9e8cPNEti5okGNpC/tst524or+Y+h
Cjyi5HxzUk4a6qJf2ag9d5YHv5WDHxMXX4J8QRSueADE3/55s4DdOrki+D+OSN38
NIDsJSl1RNQUW2BsLxzy73tmhAPDMo9gPvEhtbC84pVCuHoTdfCGBG+cQkoctJV2
G9gG2LrFa/NSSVqW20LIMQldMTs7+X9jczrsFitZA4p8exr37g==
=tg4Z
-----END PGP SIGNATURE-----
Attachment:
pgpa6apsLfD6w.pgp
Description: PGP signature