BSD PortsVulnerable: version 4.3.3nb1 is affected by 4 known vulnerabilities. See below.
www/libwebsockets 4.3.3nb1 NetBSD
Lightweight C library for websocket clients and servers
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- mit
- Categories
- www
- Package size
- 436.0 KiB, 2182.6 KiB installed
Description
Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. It has been developed continuously since 2010 and is used in tens of millions of devices and by thousands of developers around the world.
In the other systems
The newest version among them is 5.0.0, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | www/libwebsockets | 4.3.3nb1 behind since 2026-07-31 | 4 known | - | [email protected] | - |
| FreeBSD | net/libwebsockets by name | 5.0.0_1 newest | none known | - | [email protected] | 2026-08-24 |
| OpenBSD | www/libwebsockets | 4.3.2p0 behind since 2026-07-31 | no data | - | Adam Wolk <[email protected]> | - |
| DragonFly | net/libwebsockets by name | 4.3.5 behind since 2026-07-31 | none known | - | [email protected] | - |
| MidnightBSD | net/libwebsockets by name | 4.3.5 behind since 2026-07-31 | no data | - | [email protected] | - |
| HardenedBSD | net/libwebsockets by name | 5.0.0_1 newest | no data | - | [email protected] | - |
| GhostBSD | net/libwebsockets by name | 5.0.0_1 newest | no data | - | [email protected] | - |
Install
Binary package:
pkgin install libwebsocketsFrom pkgsrc:
cd /usr/pkgsrc/www/libwebsockets && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 4.3.3nb1 |
| NetBSD 10.1 aarch64 | 4.3.3nb1 |
| SmartOS / illumos x86_64 | 4.3.3nb1 |
| macOS 15 arm64 | 4.3.3nb1 |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 1
Required by 4
Known vulnerabilities 4
- libwebsockets: use-after-free (CVE-2025-11677)
- libwebsockets: stack-overflow (CVE-2025-11678)
- libwebsockets: out-of-bounds-read (CVE-2025-11679)
- libwebsockets: out-of-bounds-write (CVE-2025-11680)
4 NetBSD ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it