[Git][security-tracker-team/security-tracker][master] Track libsoup2.4 fixes via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Dec 10 06:02:00 GMT 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
463c99d9 by Salvatore Bonaccorso at 2024-12-10T07:01:38+01:00
Track libsoup2.4 fixes via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7921,7 +7921,7 @@ CVE-2024-52533 (gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-on
CVE-2024-52532 (GNOME libsoup before 3.6.1 has an infinite loop, and memory consumptio ...)
- libsoup3 3.6.0-4 (bug #1087416)
[bookworm] - libsoup3 <no-dsa> (Minor issue)
- - libsoup2.4 <unfixed> (bug #1089238)
+ - libsoup2.4 2.74.3-8.1 (bug #1089238)
[bookworm] - libsoup2.4 <no-dsa> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/issues/391
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/410
@@ -7931,7 +7931,7 @@ CVE-2024-52532 (GNOME libsoup before 3.6.1 has an infinite loop, and memory cons
CVE-2024-52531 (GNOME libsoup before 3.6.1 allows a buffer overflow in applications th ...)
- libsoup3 3.6.0-4 (bug #1087417)
[bookworm] - libsoup3 <no-dsa> (Minor issue)
- - libsoup2.4 <unfixed> (bug #1089240)
+ - libsoup2.4 2.74.3-8.1 (bug #1089240)
[bookworm] - libsoup2.4 <no-dsa> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/commit/3c54033634ae537b52582900a7ba432c52ae8174
@@ -7939,7 +7939,7 @@ CVE-2024-52531 (GNOME libsoup before 3.6.1 allows a buffer overflow in applicati
CVE-2024-52530 (GNOME libsoup before 3.6.0 allows HTTP request smuggling in some confi ...)
- libsoup3 3.5.2-1
[bookworm] - libsoup3 <no-dsa> (Minor issue)
- - libsoup2.4 <unfixed> (bug #1088812)
+ - libsoup2.4 2.74.3-8.1 (bug #1088812)
[bookworm] - libsoup2.4 <no-dsa> (Minor issue)
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/issues/377
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/libsoup/-/commit/04df03bc092ac20607f3e150936624d4f536e68b (3.5.2)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/463c99d9c9783c0ac3e06016a8ec03536424d126
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/463c99d9c9783c0ac3e06016a8ec03536424d126
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241210/2df06984/attachment.htm>
More information about the debian-security-tracker-commits
mailing list