-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Oct 2025 18:31:12 +0100 Source: libwebsockets Architecture: source Version: 4.3.5-3 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Closes: 1118746 1118747 Changes: libwebsockets (4.3.5-3) unstable; urgency=high . * Backport upstream security fix for CVE-2025-11677: use after free in lws_handshake_server() (closes: #1118747). * Backport upstream security fix for CVE-2025-11678: stack-based buffer overflow in lws_adns_parse_label() (closes: #1118746). Checksums-Sha1: 100d01530957595ce933368b3c1c470eeff3dca1 2572 libwebsockets_4.3.5-3.dsc 9f08943916f369bdba3ab6f74102bdd41d56a352 22584 libwebsockets_4.3.5-3.debian.tar.xz Checksums-Sha256: 1664627384d69cd1a8aee21fac332e736229d0666496e52690cf35474cd940b5 2572 libwebsockets_4.3.5-3.dsc beb50bd662ada04b594d623cfc24d9c57f0f05a1b5e8cb63c9c7f47d7797f333 22584 libwebsockets_4.3.5-3.debian.tar.xz Files: e8abed5fb54b7d1561e132d34aa43e7a 2572 libs optional libwebsockets_4.3.5-3.dsc 3ad74f640f18d8bb93ddf0782b2b12a2 22584 libs optional libwebsockets_4.3.5-3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmj/zTcACgkQ3OMQ54ZM yL8TAA/4oHC9dKbXenHof91YeqmLag4asyPyMGihF9c4IFf+MUYmmJ7394v2eW8c +I8OaBo0BmtEEMHcQTy7WTwvAY04SucH69bmoyJT6KT3atFOU7XGMrrounsedsXG VQDZWFYqp1LrsSGKQ+SP/2VVROOOk6+VDmnNuFnb05fZJzHLo3g5GiQRZv1h/Sqr P5PiHQ4hSxhaXeXTArp9CBfp47r8ZmZic1JlBCK8PXuCVnYf7A7Ac+D3IbeO0yME 8JfOutBg/GekUpNjBZw0FTBcGWJKmtd9Vze/FwC/QI+j+41/y//7fMzdM8q6CLC8 G49YEtVzAk/Gy7W6H12CVbXrloD1xgWwjCv+4ix5toyhGAz5t22L2xajEOJ3o7+5 d0tddIRt6qAfcl45oW0X294L7kh/D0g+PVuYSWMwAg/SFg/FCzR+tk1Gh+hvgotu WygFm0Mpl3MdVIarb5S49ah+jmf/PyE0GWk9e8cPNEti5okGNpC/tst524or+Y+h Cjyi5HxzUk4a6qJf2ag9d5YHv5WDHxMXX4J8QRSueADE3/55s4DdOrki+D+OSN38 NIDsJSl1RNQUW2BsLxzy73tmhAPDMo9gPvEhtbC84pVCuHoTdfCGBG+cQkoctJV2 G9gG2LrFa/NSSVqW20LIMQldMTs7+X9jczrsFitZA4p8exr37g== =tg4Z -----END PGP SIGNATURE-----
