From 877568dd4b189abfde9919cdd59e9e7a385a571129543bc529eaafdfd5831181 Mon Sep 17 00:00:00 2001 From: Vincent Untz Date: Fri, 29 Jul 2011 06:54:05 +0000 Subject: [PATCH] Accepting request 77374 from home:vuntz:branches:GNOME:Factory Update to 2.35.4 OBS-URL: https://build.opensuse.org/request/show/77374 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/libsoup?expand=0&rev=83 --- libsoup-2.35.3.tar.bz2 | 3 --- libsoup-2.35.4.tar.bz2 | 3 +++ libsoup.changes | 13 +++++++++++++ libsoup.spec | 2 +- 4 files changed, 17 insertions(+), 4 deletions(-) delete mode 100644 libsoup-2.35.3.tar.bz2 create mode 100644 libsoup-2.35.4.tar.bz2 diff --git a/libsoup-2.35.3.tar.bz2 b/libsoup-2.35.3.tar.bz2 deleted file mode 100644 index 04784d8..0000000 --- a/libsoup-2.35.3.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:20b7aab263a44e527b8d89c01e61a3591a719a582ad1163b2a4758dcc598c62d -size 695424 diff --git a/libsoup-2.35.4.tar.bz2 b/libsoup-2.35.4.tar.bz2 new file mode 100644 index 0000000..f92df7a --- /dev/null +++ b/libsoup-2.35.4.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:958e7c7ff8abfa2257afb4e12f2534502954a3c2f3be291bfa033954cd7a29cf +size 698398 diff --git a/libsoup.changes b/libsoup.changes index 96255fa..7dee7ba 100644 --- a/libsoup.changes +++ b/libsoup.changes @@ -1,3 +1,16 @@ +------------------------------------------------------------------- +Thu Jul 28 21:27:11 CEST 2011 - vuntz@opensuse.org + +- Update to version 2.35.4: + + CVE-2011-2054: Fixed a security hole that caused some + SoupServer users to unintentionally allow accessing the entire + local filesystem when they thought they were only providing + access to a single directory. [bgo#653258] + + Plugged another SoupCache memory leak. + + Simplified SoupCache keys, and handle collisions. [bgo#649963] + + Annotate SoupSession:add-feature, etc, as (skip), so they don't + conflict with the methods of the same name. [bgo#655150] + ------------------------------------------------------------------- Tue Jul 5 08:24:36 CEST 2011 - vuntz@opensuse.org diff --git a/libsoup.spec b/libsoup.spec index 5d7c6cd..e59a213 100644 --- a/libsoup.spec +++ b/libsoup.spec @@ -20,7 +20,7 @@ Name: libsoup Summary: HTTP client/server library for GNOME -Version: 2.35.3 +Version: 2.35.4 Release: 1 License: LGPLv2.1+ Group: Development/Libraries/GNOME