Sync from SUSE:ALP:Source:Standard:1.0 libsoup revision 1ad5a741cb63c6f5917e7bf9deeff5e7

This commit is contained in:
2025-01-06 10:58:32 +01:00
parent 7d4d330b3e
commit 2670338188
7 changed files with 417 additions and 0 deletions

View File

@@ -1,3 +1,20 @@
-------------------------------------------------------------------
Mon Dec 9 23:52:43 UTC 2024 - Michael Gorse <mgorse@suse.com>
- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
(boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
parsing params (boo#1233292 CVE-2024-52531
glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
(glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
slow and sometimes times out in our builds.
-------------------------------------------------------------------
Sat Apr 29 19:26:55 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>