Fedora Core 5 Libsoup 2.2.92 Security Advisory: HTTP Improvements

Libsoup is an HTTP library implementation in C. It was originally part

of a SOAP (Simple Object Access Protocol) implementation called Soup, but

the SOAP and non-SOAP parts have now been split into separate packages.

libsoup uses the Glib main loop and is designed to work well with GTK

applications. This enables GNOME applications to access HTTP servers

on the network in a completely asynchronous fashion, very similar to

the Gtk+ programming model (a synchronous operation mode is also

supported for those who want it).

Changes in libsoup from 2.2.91 to 2.2.92:

* Fixed server-side digest auth to return a valid "algorithm"

value and client-side to not crash if it sees an invalid one

[328615].

* Fixed the Request-Line parsing code to not hardcode a

maximum URI length (to allow very long DAAP

requests from

iTunes in Rhythmbox). [335040]

* Fixed some warnings (signed/unsigned mismatch).

- Update to 2.2.92

1782034402331379785d31475e0ba738c279e348 SRPMS/libsoup-2.2.92-1.fc5.1.src.rpm

97775005bc2206ce07fd8c18fd9dcd8beb044bd5 ppc/libsoup-2.2.92-1.fc5.1.ppc.rpm

5f86683906394652edc4bf89ab2de26c19eb1778 ppc/libsoup-devel-2.2.92-1.fc5.1.ppc.rpm

d43d7acd2e65a567148f88aeac3a0fdd5684711f ppc/debug/libsoup-debuginfo-2.2.92-1.fc5.1.ppc.rpm

ff126d8f5ceb4ab5443d96f025fe82d77315e72c x86_64/libsoup-2.2.92-1.fc5.1.x86_64.rpm

ca0604e8944bd1c99a7e8c68ecc5029e12957791 x86_64/libsoup-devel-2.2.92-1.fc5.1.x86_64.rpm

fc8c5dfcc5e7e55adfa70d379eb35563f0233c7b x86_64/debug/libsoup-debuginfo-2.2.92-1.fc5.1.x86_64.rpm

27a09cd309c314c9c7adc79362b6636b004d5e26 i386/libsoup-2.2.92-1.fc5.1.i386.rpm

e278c0e10c0df45c782e15ff3e983d85ce00af01 i386/libsoup-devel-2.2.92-1.fc5.1.i386.rpm

cbd0bcd546d7cdece130fda53aa28c9d7f3ea49b i386/debug/libsoup-debuginfo-2.2.92-1.fc5.1.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

fedora-announce-list mailing list

fedora-announce-list@redhat.com