Peter Korsgaard
b9120736a7
Fixes the following security vulnerabilities: CVE-2024-52531: GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this. https://www.cve.org/CVERecord?id=CVE-2024-52531 CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. https://www.cve.org/CVERecord?id=CVE-2024-52532 Changelog: https://gitlab.gnome.org/GNOME/libsoup/-/blob/3.6.1/NEWS Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>