Peter Korsgaard
b9120736a7
Fixes the following security vulnerabilities: CVE-2024-52531: GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this. https://www.cve.org/CVERecord?id=CVE-2024-52531 CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. https://www.cve.org/CVERecord?id=CVE-2024-52532 Changelog: https://gitlab.gnome.org/GNOME/libsoup/-/blob/3.6.1/NEWS Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
5 lines
276 B
Plaintext
5 lines
276 B
Plaintext
# From https://download.gnome.org/sources/libsoup/3.6/libsoup-3.6.1.sha256sum
|
|
sha256 ceb1f1aa2bdd73b2cd8159d3998c96c55ef097ef15e4b4f36029209fa18af838 libsoup-3.6.1.tar.xz
|
|
# Locally calculated
|
|
sha256 b7993225104d90ddd8024fd838faf300bea5e83d91203eab98e29512acebd69c COPYING
|