critical Security update for cpp-httplib

SUSE-SLES-16.0-150

This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests (bsc#1254734). - CVE-2025-66577: access and error log poisoning with spoofed client IPs due to unconditional acceptance of client-controlled `X-Forwarded-For` and `X-Real-IP` headers (bsc#1254735).

• Release Date
  Jan 15 2026
• References
  Bugzilla: 1254735, 1254734
  CVEs: CVE-2025-66577, CVE-2025-66570
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.3.1 lock rpm