OPENSUSE-SU-2019:1310-1 Security update for libsoup

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2018:2204-1 Security update for libsoup

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers bsc1052916. Bug fixes: - bsc1086036:...

Denial Of Service (DoS)

libsoup.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of check on empty hostnames in getcookies of soup-cookie-jar.c, causing DoS and possibly other attacks...