-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Aug 2026 18:56:33 +0200
Source: libwebsockets
Architecture: source
Version: 4.3.5-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Closes: 1139178 1145789
Changes:
 libwebsockets (4.3.5-1+deb13u2) trixie; urgency=medium
 .
   * Backport upstream security fix for CVE-2026-10650: resource consumption
     in the lws_ssh_parse_plaintext() function (closes: #1139178).
   * Backport upstream security fix for CVE-2026-78161: LECP CBOR position
     out of bounds write (closes: #1145789).
Checksums-Sha1:
 a8f2dcb09a7b4b901835b868b4267d459656e425 2604 libwebsockets_4.3.5-1+deb13u2.dsc
 d8bd965ae64410a42c24a45475a7ed4f67ac1552 20888 libwebsockets_4.3.5-1+deb13u2.debian.tar.xz
Checksums-Sha256:
 999d0997cafed814b2b67efdb6add8875b88591ee00dd440586eebccb96a1727 2604 libwebsockets_4.3.5-1+deb13u2.dsc
 059db96dc878057a629843e754fa56b2091186049c2bd36ba79db7fec62b8aea 20888 libwebsockets_4.3.5-1+deb13u2.debian.tar.xz
Files:
 a6b26eaf8b6498cffbef523b4700d0f8 2604 libs optional libwebsockets_4.3.5-1+deb13u2.dsc
 8c8a25961f7874010de50411be269096 20888 libs optional libwebsockets_4.3.5-1+deb13u2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmqbsuAACgkQ3OMQ54ZM
yL+Nxg/9GrCUq5dAhELZs6rlrYRsPC6OrjhPQxIUPci4XImanBhBNZL9ql7n69dt
tOTAASSoPuQQH9rrSzRfLmDcYFe1JUeanQTaL5mFJ9JBRfLIiBDwCz90IINv93nb
jeRiZv3MS+SkSvNZYo7ApHMZnC0FiTsmEI0AnFwcwiEMVLsna/z6VWuvUcamPmCS
lnq5EIF8hq/I4vycXcdCoxufEXCX+XhswH8OJRwulpe+31+5JQonAb8UEFSVm82s
3lpem6qxLh6QkYz60vPFQh/zSWZ5xUFlAekR0wVNlbwPBUwlkUHD4R9Evz7ryy9x
eQT0eG0jvj2bDSnL0FTYEWXfctN/dTvS67KBmcTHRkR2eKh8D0oCl023NLcw1jOI
Fv+cXzVBEJ+v6soKnbOofFhVgs4F1ImfWwPm302Ns1uDgWrg6l+DokAHgSdml20y
T5baVrxSJqE5ZfodEkRJbyJ/evrrHDEuiZqrMa4YV8fEnnEtMHkooDK8fcO+GGC7
6gAR+W/ryKtJx4qlstS9X84hvXU2d75uJ0z3IWThPqKZsKGXaYb9lB1tykhjGJA8
DpUCKsaxNYhMYbuasZL4xEsMWuxRM1zj4Go70bXmMJEZwHxxnpRP8Qm3ujbUIfgG
cQzFlZfgF3aJQhcW7LP2SzDoXG0w6gjZRGHNfsww80uk5DXS0NE=
=GkWr
-----END PGP SIGNATURE-----