From 389c32e70857150deb810ae0f9912235dc1fae31495131fc4783e27bee7cb43d Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Thu, 31 Aug 2017 07:44:23 +0000 Subject: [PATCH 1/2] Accepting request 519426 from GNOME:Next Scripted push of project GNOME:Next OBS-URL: https://build.opensuse.org/request/show/519426 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/libsoup?expand=0&rev=192 --- libsoup-2.58.2.tar.xz | 3 --- libsoup-2.59.90.1.tar.xz | 3 +++ libsoup.changes | 37 +++++++++++++++++++++++++++++++++++++ libsoup.spec | 4 ++-- 4 files changed, 42 insertions(+), 5 deletions(-) delete mode 100644 libsoup-2.58.2.tar.xz create mode 100644 libsoup-2.59.90.1.tar.xz diff --git a/libsoup-2.58.2.tar.xz b/libsoup-2.58.2.tar.xz deleted file mode 100644 index 3f694b5..0000000 --- a/libsoup-2.58.2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:442300ca1b1bf8a3bbf2f788203287ff862542d4fc048f19a92a068a27d17b72 -size 1815256 diff --git a/libsoup-2.59.90.1.tar.xz b/libsoup-2.59.90.1.tar.xz new file mode 100644 index 0000000..12e5a22 --- /dev/null +++ b/libsoup-2.59.90.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e0c396be890f6704bd449de3bc3b94c671a87f29063bab445fa9ceaf81e2082e +size 1823124 diff --git a/libsoup.changes b/libsoup.changes index 14f416f..f80eb8a 100644 --- a/libsoup.changes +++ b/libsoup.changes @@ -1,3 +1,40 @@ +------------------------------------------------------------------- +Tue Aug 15 07:50:16 UTC 2017 - zaitor@opensuse.org + +- Update to version 2.59.90.1: + + Fixed a chunked decoding buffer overrun that could be exploited + against either clients or servers (bgo#785774, CVE-2017-2885). +- Changes from version 2.59.90: + + Several SoupAuthNegotiate compatibility fixes (bgo#783780, + bgo#783781). + + Include a payload in SoupWebsocketConnection's "ping" messages + (to avoid problems with certain buggy server implementations), + and emit a signal when receiving a "pong" (to allow apps to + notice when the remote peer has disconnected them) + (bgo#785660). + + Fix the interpretation of wss:// URIs, which previously mostly + didn't work (bgo#784766). + + Fixed SoupContentSniffer behavior on XML files with no + Content-Type (webkit#173923). + + Fixed a bug with cancelling async requests (bgo#773257). + + Reverted the (undocumented) change in 2.58.0 to call + soup_session_abort() after changing SoupSession:proxy-resolver; + while this made its behavior more consistent with :proxy-uri, + it ended up breaking things (bgo#781590). + + Allow HTTP responses that have no trailing CRLF after the + response headers (and no body) (bgo#780352). + + Fixed an out-of-bounds read in SoupURI parsing (bgo#785042). + + Fixed a spurious (debug-level) error message in + SoupWebsocketConnection (bgo#784935). + + Fixed introspection annotations on + soup_message_headers_get_content_range(). + + Fixed a flake in tests/header-parsing (bgo#777258). + + Update tests/test-cert.pem to use stronger algorithms to avoid + problems with newer gnutls (bgo#784949). + + Fixed examples/get to not accidentally break https certificate + validation (bgo#784259). + + Misc updates to apache/php stuff in unit tests. + ------------------------------------------------------------------- Mon Aug 14 12:22:57 UTC 2017 - zaitor@opensuse.org diff --git a/libsoup.spec b/libsoup.spec index de4d7a5..04778bb 100644 --- a/libsoup.spec +++ b/libsoup.spec @@ -20,10 +20,10 @@ Name: libsoup Summary: HTTP client/server library for GNOME License: LGPL-2.1+ Group: Development/Libraries/GNOME -Version: 2.58.2 +Version: 2.59.90.1 Release: 0 Url: http://www.gnome.org -Source: https://download.gnome.org/sources/libsoup/2.58/%{name}-%{version}.tar.xz +Source: https://download.gnome.org/sources/libsoup/2.59/%{name}-%{version}.tar.xz Source99: baselibs.conf BuildRequires: glib-networking BuildRequires: glib2-devel >= 2.38.0 From a5f19f41570294a82baf718c652e7319083dfa6db5b474fe1f4389111598e420 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Tue, 12 Sep 2017 20:09:28 +0000 Subject: [PATCH 2/2] Accepting request 523816 from GNOME:Next Update to 3.26.0 OBS-URL: https://build.opensuse.org/request/show/523816 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/libsoup?expand=0&rev=193 --- libsoup-2.59.90.1.tar.xz | 3 --- libsoup-2.60.0.tar.xz | 3 +++ libsoup.changes | 6 ++++++ libsoup.spec | 4 ++-- 4 files changed, 11 insertions(+), 5 deletions(-) delete mode 100644 libsoup-2.59.90.1.tar.xz create mode 100644 libsoup-2.60.0.tar.xz diff --git a/libsoup-2.59.90.1.tar.xz b/libsoup-2.59.90.1.tar.xz deleted file mode 100644 index 12e5a22..0000000 --- a/libsoup-2.59.90.1.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:e0c396be890f6704bd449de3bc3b94c671a87f29063bab445fa9ceaf81e2082e -size 1823124 diff --git a/libsoup-2.60.0.tar.xz b/libsoup-2.60.0.tar.xz new file mode 100644 index 0000000..c3832e8 --- /dev/null +++ b/libsoup-2.60.0.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b324edbecda0884143c0853b4a2bd5bd37fb3761f12f293c621ff34b9acdc84c +size 1826560 diff --git a/libsoup.changes b/libsoup.changes index f80eb8a..3e4a883 100644 --- a/libsoup.changes +++ b/libsoup.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Sep 12 20:07:03 UTC 2017 - dimstar@opensuse.org + +- Update to version 2.60.0: + + Updated translations. + ------------------------------------------------------------------- Tue Aug 15 07:50:16 UTC 2017 - zaitor@opensuse.org diff --git a/libsoup.spec b/libsoup.spec index 04778bb..65d8e02 100644 --- a/libsoup.spec +++ b/libsoup.spec @@ -20,10 +20,10 @@ Name: libsoup Summary: HTTP client/server library for GNOME License: LGPL-2.1+ Group: Development/Libraries/GNOME -Version: 2.59.90.1 +Version: 2.60.0 Release: 0 Url: http://www.gnome.org -Source: https://download.gnome.org/sources/libsoup/2.59/%{name}-%{version}.tar.xz +Source: http://download.gnome.org/sources/libsoup/2.60/%{name}-%{version}.tar.xz Source99: baselibs.conf BuildRequires: glib-networking BuildRequires: glib2-devel >= 2.38.0