Fedora alert FEDORA-2018-a9615e2a1e (gsoap)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 26 Update: gsoap-2.8.43-3.fc26 | |
| Date: | Fri, 27 Apr 2018 23:00:00 +0000 (UTC) | |
| Message-ID: | <20180427230000.A41766149B46@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2018-a9615e2a1e 2018-04-27 22:57:28.389561 -------------------------------------------------------------------------------- Name : gsoap Product : Fedora 26 Version : 2.8.43 Release : 3.fc26 URL : http://gsoap2.sourceforge.net/ Summary : Generator Tools for Coding SOAP/XML Web Services in C and C++ Description : The gSOAP Web services development toolkit offers an XML to C/C++ language binding to ease the development of SOAP/XML Web services in C and C/C++. -------------------------------------------------------------------------------- Update Information: This patch addresses a critical issue with the DIME protocol receiver that may cause the receiver to become unresponsive when a malformed DIME protocol message is received. -- https://www.genivia.com/advisory.html -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 18 2018 Mattias Ellert <mattias.ellert@physics.uu.se> - 2.8.43-3 - Fix issue with DIME protocol receiver and malformed DIME headers * Tue Aug 1 2017 Mattias Ellert <mattias.ellert@physics.uu.se> - 2.8.43-2 - CVE-2017-9765 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1568930 - gsoap: Infinite loop on malformed DIME protocol messages [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1568930 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-a9615e2a1e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org