Public bug reported: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
affects distros/ubuntu/libsoup status confirmed subscribe ubuntu-archive Please sync libsoup (main) from Debian unstable (main). Changelog since current feisty version 2.2.99-0ubuntu1: libsoup (2.2.99-1) unstable; urgency=low * New upstream stable release; no API nor ABI change; stricter header parsing and testsuite, plug for a small memory leak, bug fix, doc fix. - Do not use the upstream version for shlibs, set them to >= 2.2.98. - Drop patch 01_parse_headers_DoS, fixed differently upstream. -- Loic Minier <[EMAIL PROTECTED]> Tue, 9 Jan 2007 09:23:51 +0100 libsoup (2.2.98-2) unstable; urgency=high * 01_parse_headers_DoS.patch: new patch, fixes a remote denial of service vulnerability in rhythmbox - and probably anything using libsoup's HTTP server code. Closes: #405197. -- Josselin Mouette <[EMAIL PROTECTED]> Tue, 2 Jan 2007 18:42:12 +0100 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFFvwtFQxo87aLX0pIRAmvIAJ9UcBdYZS7ITqziqgNdV00CvNVuoACg1kAY nP6x4oDN7M0iHrsm9+q/HvM= =2USa -----END PGP SIGNATURE----- ** Affects: libsoup (Ubuntu) Importance: Undecided Status: Confirmed -- Please sync libsoup (main) from unstable (main) https://launchpad.net/bugs/82245 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs