Bug#993592: probably not vulnerable? Re: #993592 CVE-2021-39359

Moritz Mühlenhoff jmm at inutil.org
Wed Dec 11 10:41:03 GMT 2024


On Tue, Dec 10, 2024 at 10:25:50PM +0000, Rebecca N. Palmer wrote:
> On 09/12/2024 21:13, Salvatore Bonaccorso wrote:
> > But what happens if built with --without-libsoup, I guess then TLS
> > certificate validation is absent as well what are the consequences?
> 
> When built --without-libsoup, the web functionality is disabled entirely.
> (Implemented in providers/Makefile.am, WEB = no in build logs.)

Thanks, I've just pushed an update to the Debian Security Tracker.

Cheers,
        Moritz



More information about the pkg-gnome-maintainers mailing list