UbuntuUpdates.org

Package "cpp-httplib"

Name: cpp-httplib

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • C++ HTTP/HTTPS server and client library - development files
  • C++ HTTP/HTTPS server and client library
Latest version: 0.18.7-1ubuntu0.25.10.2
Release: questing (25.10)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "cpp-httplib" in Questing

Repository Area Version
base universe 0.18.7-1
security universe 0.18.7-1ubuntu0.25.10.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.18.7-1ubuntu0.25.10.2 2026-06-25 11:07:25 UTC

  cpp-httplib (0.18.7-1ubuntu0.25.10.2) questing-security; urgency=medium

  * SECURITY UPDATE: HTTP header injection via percent-decoded values
    - debian/patches/CVE-2026-45372.patch: stop percent-decoding
      request header values in parse_header()
    - CVE-2026-45372

 -- Sudhakar Verma <email address hidden> Wed, 24 Jun 2026 14:59:45 +0530
Source diff to previous version
CVE-2026-45372 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, when cpp-httplib's server parses an incoming reque

Version: 0.18.7-1ubuntu0.25.10.1 2026-01-15 00:08:04 UTC

  cpp-httplib (0.18.7-1ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: authorization bypass
    - debian/patches/CVE-2025-66570.patch: fix untrusted header
      handling
    - CVE-2025-66570

 -- Julia Sarris <email address hidden> Wed, 10 Dec 2025 13:31:19 -0500
CVE-2025-66570 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP he


About   -   Send Feedback to @ubuntu_updates