- What: Security update for cpp-httplib library
- Impact: Mitigates denial of service vulnerabilities in Debian
[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6228-1] cpp-httplib security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6228-1] cpp-httplib security update From: Moritz Muehlenhoff <jmm@debian.org> Date: Wed, 22 Apr 2026 13:04:24 +0000 Message-id: <[🔎] aejHWEVaptWLN8Sw@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6228-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff April 22, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : cpp-httplib CVE ID : CVE-2025-46728 CVE-2025-53629 Multiple security issues were discovered in cpp-httplib, a C++ cross platform HTTP/HTTPS library, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 0.18.7-1+deb13u1. We recommend that you upgrade your cpp-httplib packages. For the detailed security status of cpp-httplib please refer to its security tracker page at: https://security-tracker.debian.org/tracker/cpp-httplib Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmnoxuwACgkQEMKTtsN8 TjbF3hAAiWAycOpM7+Ro9XqsOhTsMidi54EB9R6SV979ibWR8+tzf+9c80iGofOs aDBv5imdkCpKuTpJSn2i9KMWsGpRliAVmTMzvtj3JMWkg67bDJPwg+JLgkVnPr2R BifmoSQofhQ4T3PlwfXUgwAOgirJpmvuPkHaC9kEWsPZKcRtm+COepzK2sknA1li tfNa95diEfSl96TAcwAgUi4HRKwBzuiRU8xH+uy3qwYix4Ljq79WKdUPNU0hEwuk 9pgGdznMLYSXpTposYcoG4NuLtghCjRSiwxE+Lqhq663rMY7+GZ1jcB+ipaBvEZS PZEXe9l7pbT0DadnnCNSG1gNs6F+nBHlL8RAwpj1qQoha083rhxWApscUjSyrLHQ NuNfNdfTLJRkzCfh/IbtifHKvXjr3D67x4xDkGkavLGfBkJAlDznfxQTzGml1X+3 piw9hQxU5zJYGIl3FfV0uYG3E4YV0IST80y4l2ZgianVddhozcT/cJhsluP10e9i Wf1oP0n8Cq+Rbit7lNqDohKciTBejTEV/ApVaISJ1FBHZvNBp5zUK2sQ81UpOkPN 1XRlj4df/W26jqQHaAg8A8PudEN37UONDkTRBfi+1UnXLgAl1ytGmj22cI6NlS3B bBcZNNc2t6Q3D1BkVQasYhikC+1NOsSLka4iksbjtGjYQ5LZPtM= =8Dlz -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6227-1] strongswan security update Previous by thread: [SECURITY] [DSA 6227-1] strongswan security update Index(es): Date Thread