gpp_maybe Security update for cpp-httplib

SUSE-SLES-16.0-724

This update for cpp-httplib fixes the following issues - CVE-2026-21428: server-side request forgery via header injection (bsc#1255835). - CVE-2026-22776: unsafe handling of compressed HTTP request can cause a denial of service (bsc#1256518). - CVE-2026-28434: default exception handler may leak e.what() to clients via EXCEPTION_WHAT response header (bsc#1259221). - CVE-2026-28435: payload size limit bypass via gzip decompression in ContentReader (streaming) can lead to denial of service (bsc#1259220). - CVE-2026-29076: denial of service via crafted HTTP POST request (bsc#1259373).

• Release Date
  May 8 2026
• References
  Bugzilla: 1255835, 1256518, 1259220, 1259221, 1259373
  CVEs: CVE-2026-21428, CVE-2026-22776, CVE-2026-28434, CVE-2026-28435, CVE-2026-29076
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.5.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.5.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.5.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  libcpp-httplib0_22
  A C++11 HTTP/HTTPS library

  0.22.0-160000.5.1 lock rpm