Red Hat Security Advisory

RHSA-2011:1102

libsoup security update

Released 2011-07-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) libsoup-2.28.2-1.el6_1.1, libsoup-2.28.2-1.el6_1.1.ppc, libsoup-devel-2.28.2-1.el6_1.1 +1

Fixes 1 record

TI-2011-02216 CVE-2011-2524 · GHSA-xm6g-x36q-hxpx

Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4…

LOW 27

Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in a URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01925 Published 2011-08-31 Fixed CWE-22