USN-1181-1: libsoup vulnerability

Releases

• Ubuntu 11.04
• Ubuntu 10.10
• Ubuntu 10.04

Packages

• libsoup2.4 - HTTP client/server library for GNOME

Details

It was discovered that libsoup did not properly validate its input when
processing SoupServer requests. A remote attacker could exploit this to
access files via directory traversal.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.04

• libsoup2.4-1 - 2.34.0-0ubuntu1.1

Ubuntu 10.10

• libsoup2.4-1 - 2.31.92-0ubuntu1.1

Ubuntu 10.04

• libsoup2.4-1 - 2.30.2-0ubuntu0.2

After a standard system update you need to restart any applications that
use libsoup to make all the necessary changes.

References

• CVE-2011-2524