[07:19] <KGB-X> libsoup2.4 debian/bookworm Syeda Shagufta Naaz * [update] merge request !4: Backport fixes for CVE-2025-32911 and CVE-2025-32913 * https://salsa.debian.org/gnome-team/libsoup/-/merge_requests/4
[07:19] -ubottu:#ubuntu-desktop- Merge 4 in gnome-team/libsoup "Backport fixes for CVE-2025-32911 and CVE-2025-32913" [Opened]
[07:19] -ubottu:#ubuntu-desktop- A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server. <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32911>
[07:19] -ubottu:#ubuntu-desktop- A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function. <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32913>
[07:20] <KGB-X> libsoup2.4 debian/bookworm Syeda Shagufta Naaz * [update] merge request !4: Backport fixes for seven CVEs * https://salsa.debian.org/gnome-team/libsoup/-/merge_requests/4
[07:20] -ubottu:#ubuntu-desktop- Merge 4 in gnome-team/libsoup "Backport fixes for seven CVEs" [Opened]
[08:43] <KGB-X> libsoup2.4 Sean Whitton 614518 * commented merge request !4 * https://salsa.debian.org/gnome-team/libsoup/-/merge_requests/4#note_614518
[08:43] -ubottu:#ubuntu-desktop- Merge 4 in gnome-team/libsoup "Backport fixes for seven CVEs" [Opened]
[13:14] <KGB-X> libsoup2.4 debian/bookworm Syeda Shagufta Naaz * [update] merge request !4: Backport fixes for seven CVEs * https://salsa.debian.org/gnome-team/libsoup/-/merge_requests/4
[13:14] -ubottu:#ubuntu-desktop- Merge 4 in gnome-team/libsoup "Backport fixes for seven CVEs" [Opened]
[13:19] <KGB-X> libsoup2.4 Syeda Shagufta Naaz 614590 * commented merge request !4 * https://salsa.debian.org/gnome-team/libsoup/-/merge_requests/4#note_614590
[13:19] -ubottu:#ubuntu-desktop- Merge 4 in gnome-team/libsoup "Backport fixes for seven CVEs" [Opened]