Re: [PATCH 0/2] libwebsockets: update to 4.3.10 and fix CVE-2026-19773

[Benjamin Robin <benjamin.robin@bootlin.com>]

On Wednesday, September 23, 2026 at 2:52 PM, Benjamin Robin (Schneider Electric) wrote:
> This series updates libwebsockets to version 4.3.10 and also fixes the
> CVE-2026-19773 by backporting the fix from v5 branch.

Sorry, this series is for scarthgap, and I forgot to add the tags in the
subject. I am going to send a v2

> 
> Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
> ---
> Benjamin Robin (Schneider Electric) (2):
>       libwebsockets: update to version 4.3.10
>       libwebsockets: fix CVE-2026-19773
> 
>  .../libwebsockets/CVE-2025-11677.patch             | 161 ---------------------
>  .../libwebsockets/CVE-2025-11678.patch             | 128 ----------------
>  .../libwebsockets/CVE-2026-19773.patch             |  32 ++++
>  ...websockets_4.3.3.bb => libwebsockets_4.3.10.bb} |   7 +-
>  4 files changed, 35 insertions(+), 293 deletions(-)
> ---
> base-commit: b5874ea07d69919d9b40d59f2c2f0bbd24bc3259
> change-id: 20260923-update-libwebsockets-fix-cve-2026-19773-21cf90b878b3
> 
> Best regards,
> --  
> Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>

-- 
Benjamin Robin, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com