Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Fedora 43 cpp-httplib Critical Denial of Service Fix FEDORA-2026-c2049f7220

fedora
Calendar Grey March 21, 2026
Dist Fedora Esm H88
Critical updates for Fedora cpp-httplib address Denial of Service threats from crafted HTTP requests. Secure your system now.
Update to 0.37.0 (rhbz#2441656) Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663) Update to 0.35.0 Payload size limit bypass via gzip decompressi...

Summary

A C++11 single-file header-only cross platform HTTP/HTTPS library.

It's extremely easy to setup. Just include the httplib.h file in your code!

Update Information:

Update to 0.37.0 (rhbz#2441656) Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076, rhbz#2445663) Update to 0.35.0 Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies (CVE-2026-28435, rhbz#2444638) Default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header (CVE-2026-28434, rhbz#2444636) httplib/compare/v0.32.0...v0.37.0

Topics%20covered

Topics Covered

security advisory denial of service fedora software update c++ http library

Change Log

* Thu Mar 12 2026 Petr Men\u0161k - 0.37.1-2 - Build for 32 bits again * Thu Mar 12 2026 Petr Men\u0161k - 0.37.1-1 - Update to 0.37.1 (rhbz#2445943) - Fixes Denial of Service via malformed Content-Length header (CVE-2026-31870) - httplib/security/advisories/GHSA-39q5-hh6x-jpxx - httplib/releases/tag/v0.37.1 * Mon Mar 9 2026 Petr Men\u0161k - 0.37.0-1 - Update to 0.37.0 (rhbz#2441656) - Fixes Denial of Service via crafted HTTP POST request (CVE-2026-29076)

References


[ 1 ] Bug #2441656 - cpp-httplib-0.37.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2441656 [ 2 ] Bug #2444636 - CVE-2026-28434 cpp-httplib: default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444636 [ 3 ] Bug #2444638 - CVE-2026-28435 cpp-httplib: payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2444638 [ 4 ] Bug #2445663 - CVE-2026-29076 cpp-httplib: cpp-httplib: Denial of Service via crafted HTTP POST request [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2445663 [ 5 ] Bug #2446926 - CVE-2026-31870 cpp-httplib: cpp-httplib: Denial of Service via malformed Content-Length header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2446926

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c2049f7220' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: cpp-httplib
Product: Fedora 43
Version: 0.37.1
Release: 2.fc43
URL: httplib
Summary: A C++11 single-file header-only cross platform HTTP/HTTPS library

Topics%20covered

Topics Covered

security advisory denial of service fedora software update c++ http library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here