Red Hat Security AdvisoryRHSA-2009:0344
libsoup security update
Released 2009-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libsoup-2.2.98-2.el5_3.1, libsoup-2.2.98-2.el5_3.1.i386, libsoup-2.2.98-2.el5_3.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 evolution28-libsoup-2.2.98-5.el4.1, evolution28-libsoup-2.2.98-5.el4.1.i386, evolution28-libsoup-2.2.98-5.el4.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libsoup-2.2.98-2.el5_3.1, libsoup-2.2.98-2.el5_3.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libsoup-2.2.98-2.el5_3.1, libsoup-devel-2.2.98-2.el5_3.1, libsoup-devel-2.2.98-2.el5_3.1.i386
- Red Hat Enterprise Linux Desktop version 4 evolution28-libsoup-2.2.98-5.el4.1, evolution28-libsoup-2.2.98-5.el4.1.i386, evolution28-libsoup-devel-2.2.98-5.el4.1 +5
- Red Hat Enterprise Linux ES version 4 evolution28-libsoup-2.2.98-5.el4.1, evolution28-libsoup-2.2.98-5.el4.1.i386, evolution28-libsoup-2.2.98-5.el4.1.ia64 +9
- Red Hat Enterprise Linux WS version 4 evolution28-libsoup-2.2.98-5.el4.1, evolution28-libsoup-2.2.98-5.el4.1.i386, evolution28-libsoup-2.2.98-5.el4.1.ia64 +9
Fixes 1 record
Priority MEDIUM 40
Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04024 · Published 2009-03-14 · Fixed CWE-189
