Peter Korsgaard
f2769d89f1
Fixes the following security vulnerabilities:
CVE-2024-52531: GNOME libsoup before 3.6.1 allows a buffer overflow in
applications that perform conversion to UTF-8 in
soup_header_parse_param_list_strict. Input received over the network cannot
trigger this.
https://www.cve.org/CVERecord?id=CVE-2024-52531
CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory
consumption. during the reading of certain patterns of WebSocket data from
clients.
https://www.cve.org/CVERecord?id=CVE-2024-52532
Changelog: https://gitlab.gnome.org/GNOME/libsoup/-/blob/3.6.1/NEWS
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit b9120736a7)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>