SUSE-SU-2025:4291-1

This update for libmicrohttpd fixes the following issues:

CVE-2025-59777: Fixed NULL pointer dereference via specially crafted packet sent by an attacker (bsc#1253177)
CVE-2025-62689: Fixed heap-based buffer overflow via specially crafted packet sent by an attacker (bsc#1253178)

SUSE:Linux Enterprise Module for Basesystem 15 SP6libmicrohttpd

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6libmicrohttpd12

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7libmicrohttpd

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7libmicrohttpd12

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6libmicrohttpd

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6libmicrohttpd-devel

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7libmicrohttpd

Fixed in:

0.9.77-150600.3.3.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP7libmicrohttpd-devel

Fixed in:

0.9.77-150600.3.3.1

openSUSE:Leap 15.6libmicrohttpd

Fixed in:

0.9.77-150600.3.3.1

openSUSE:Leap 15.6libmicrohttpd-devel

Fixed in:

0.9.77-150600.3.3.1

openSUSE:Leap 15.6libmicrohttpd12

Fixed in:

0.9.77-150600.3.3.1