==========================================================================
Ubuntu Security Notice USN-4152-1
October 09, 2019

libsoup2.4 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 19.04
– Ubuntu 18.04 LTS

Summary:

libsoup could be made to crash if it received specially crafted network
traffic.

Software Description:
– libsoup2.4: HTTP client/server library for GNOME

Details:

It was discovered that libsoup incorrectly handled parsing certain NTLM
messages. If a user or automated system were tricked into connecting to a
malicious server, a remote attacker could possibly use this issue to cause
a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
libsoup2.4-1 2.66.1-1ubuntu0.1

Ubuntu 18.04 LTS:
libsoup2.4-1 2.62.1-1ubuntu0.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4152-1
CVE-2019-17266

Package Information:
https://launchpad.net/ubuntu/+source/libsoup2.4/2.66.1-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libsoup2.4/2.62.1-1ubuntu0.4

—–BEGIN PGP SIGNATURE—–
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=hdlc
—–END PGP SIGNATURE—–
—