[Deepin Integration]~[v25-Release] feat: update libsoup3 to 3.6.5-8 by deepin-community-bot[bot]@deepin-community/libsoup3 by deepin-community-ci-bot[bot] #12937
Description
Package information | 软件包信息
| 包名 | 版本 |
|---|---|
| libsoup3 | 3.6.5-8 |
Package repository address | 软件包仓库地址
deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-3752:/community/testing/ ./
Changelog | 更新信息
libsoup3 (3.6.5-8) unstable; urgency=high
[ Bruce Cable ]
- SECURITY UPDATE: Carriage Return Line Feed Injection
- debian/patches/CVE-2026-1467.patch: Do host validation when checking if
a GUri is valid- CVE-2026-1467 (Closes: #1126548)
- debian/patches/CVE-2026-1536.patch: Always validate the headers value
when coming from untrusted source- CVE-2026-1536 (Closes: #1126627)
- debian/patches/CVE-2026-1467.patch: Do host validation when checking if
- SECURITY UPDATE: Information Leak
- debian/patches/CVE-2026-1539.patch: Also remove Proxy-Authorization
header on cross origin redirect - CVE-2026-1539 (Closes: #1126628)
- debian/patches/CVE-2026-1539.patch: Also remove Proxy-Authorization
[ Jeremy Bícha ]
- SECURITY UPDATE: HTTP Request smuggling vulnerability
- debian/patches/CVE-2026-1760.patch: Close the connection after
responding to a request containing Content-Length and Transfer-Encoding- CVE-2026-1760 (Closes: #1126876)
- debian/patches/CVE-2026-1760.patch: Close the connection after
- SECURITY UPDATE: Stack-based buffer overflow vulnerability
- debian/patches/CVE-2026-1761.patch: Make sure read length is smaller
than buffer length when boundary is found- CVE-2026-1761 (Closes: #1126877)
- debian/patches/CVE-2026-1761.patch: Make sure read length is smaller
- SECURITY UPDATE: HTTP Request smuggling vulnerability
- debian/patches/CVE-2026-1801-pre1.patch: Correct chunked trailers
end detection - debian/patches/CVE-2026-1801.patch: Use CRLF as line boundary
when parsing chunked encoding data
- debian/patches/CVE-2026-1801-pre1.patch: Correct chunked trailers
Metadata
Metadata
Assignees
Labels
Type
Projects
Status