Bug#941912: libsoup2.4: CVE-2019-17266

Salvatore Bonaccorso carnil at debian.org
Wed Oct 9 19:48:31 BST 2019


Hi Claudio,

On Wed, Oct 09, 2019 at 01:10:04PM +0300, Claudio Saavedra wrote:
> On Mon, 07 Oct 2019 16:43:28 +0200 Salvatore Bonaccorso <
> carnil at debian.org> wrote:
> 
> > Please adjust the affected versions in the BTS as needed.
> 
> I'm the libsoup maintainer. This bug affects libsoup from 2.65.1 until
> 2.68.1, previous versions are unaffected. I just uploaded upstream new
> packages fixing this vulnerability for the 2.66 and 2.68 series (2.66.4
> and 2.68.2, respectively).

Thanks for this information, so I'm updating the tracker information.
While at it, I'm pretty sure
https://gitlab.gnome.org/GNOME/libsoup/issues/173 was previously
accessible, but now it is not anymore (I was wondering about the
reason).

Regards,
Salvatore



More information about the pkg-gnome-maintainers mailing list