UbuntuUpdates.org

Package "libcpp-httplib-dev"

Name: libcpp-httplib-dev

Description:

C++ HTTP/HTTPS server and client library - development files
Latest version: 0.18.7-1ubuntu0.25.10.2
Release: questing (25.10)
Level: updates
Repository: universe
Head package: cpp-httplib
Homepage: https://github.com/yhirose/cpp-httplib

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libcpp-httplib-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libcpp-httplib-dev" in Questing

Repository Area Version
base universe 0.18.7-1
security universe 0.18.7-1ubuntu0.25.10.2

Changelog

Version: 0.18.7-1ubuntu0.25.10.2 2026-06-25 11:07:25 UTC

  cpp-httplib (0.18.7-1ubuntu0.25.10.2) questing-security; urgency=medium

  * SECURITY UPDATE: HTTP header injection via percent-decoded values
    - debian/patches/CVE-2026-45372.patch: stop percent-decoding
      request header values in parse_header()
    - CVE-2026-45372

 -- Sudhakar Verma <email address hidden> Wed, 24 Jun 2026 14:59:45 +0530
Source diff to previous version
CVE-2026-45372 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, when cpp-httplib's server parses an incoming reque

Version: 0.18.7-1ubuntu0.25.10.1 2026-01-15 00:08:04 UTC

  cpp-httplib (0.18.7-1ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: authorization bypass
    - debian/patches/CVE-2025-66570.patch: fix untrusted header
      handling
    - CVE-2025-66570

 -- Julia Sarris <email address hidden> Wed, 10 Dec 2025 13:31:19 -0500
CVE-2025-66570 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP he


About   -   Send Feedback to @ubuntu_updates