Bug#941912: libsoup2.4: CVE-2019-17266

2019-10-10 Thread Claudio Saavedra
On Wed, 2019-10-09 at 20:48 +0200, Salvatore Bonaccorso wrote: > > Thanks for this information, so I'm updating the tracker information. Thank you. > While at it, I'm pretty sure > https://gitlab.gnome.org/GNOME/libsoup/issues/173 was previously > accessible, but now it is not anymore (I was won

Bug#941912: libsoup2.4: CVE-2019-17266

2019-10-09 Thread Salvatore Bonaccorso
Hi Claudio, On Wed, Oct 09, 2019 at 01:10:04PM +0300, Claudio Saavedra wrote: > On Mon, 07 Oct 2019 16:43:28 +0200 Salvatore Bonaccorso < > car...@debian.org> wrote: > > > Please adjust the affected versions in the BTS as needed. > > I'm the libsoup maintainer. This bug affects libsoup from 2.65

Bug#941912: libsoup2.4: CVE-2019-17266

2019-10-09 Thread Claudio Saavedra
On Mon, 07 Oct 2019 16:43:28 +0200 Salvatore Bonaccorso < car...@debian.org> wrote: > Please adjust the affected versions in the BTS as needed. I'm the libsoup maintainer. This bug affects libsoup from 2.65.1 until 2.68.1, previous versions are unaffected. I just uploaded upstream new packages fi

Bug#941912: libsoup2.4: CVE-2019-17266

2019-10-07 Thread Salvatore Bonaccorso
Source: libsoup2.4 Version: 2.68.1-2 Severity: important Tags: security upstream Forwarded: https://gitlab.gnome.org/GNOME/libsoup/issues/173 Hi, The following vulnerability was published for libsoup2.4. CVE-2019-17266[0]: | libsoup through 2.68.1 has a heap-based buffer over-read because | soup