shield Security update for libsoup

SUSE-SLE-SERVER-12-SP2-2019-25

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097). - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers (bsc#1052916). Bug fixes: - bsc#1086036: translation-update-upstream commented out for Leap

• Release Date
  Jan 8 2019
• References
  Bugzilla: 1052916, 1100097, 1086036
  CVEs: CVE-2018-12910, CVE-2017-2885
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.2 s390x

• Packages
  libsoup
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock src

  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock rpm

  libsoup-2_4-1-32bit
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock rpm

  libsoup-lang
  Languages for package libsoup

  2.62.2-5.7.1

  lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.62.2-5.7.1

  lock rpm

SUSE Linux Enterprise Server LTSS 12.2 ppc64le

• Packages
  libsoup
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock src

  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock rpm

  libsoup-lang
  Languages for package libsoup

  2.62.2-5.7.1

  lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.62.2-5.7.1

  lock rpm

SUSE Linux Enterprise Server LTSS 12.2 x86_64

• Packages
  libsoup
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock src

  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock rpm

  libsoup-2_4-1-32bit
  HTTP client/server library for GNOME

  2.62.2-5.7.1

  lock rpm

  libsoup-lang
  Languages for package libsoup

  2.62.2-5.7.1

  lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.62.2-5.7.1

  lock rpm