This update for libsoup fixes the following issues:
A bug in the HTTP Chunked Encoding code has been fixed that could have been
exploited by attackers to cause a stack-based buffer overflow in client or
server code running libsoup (bsc#1052916, CVE-2017-2885).
Affected Packages
libsoup-2_4-1
SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12-LTSSSUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE OpenStack Cloud 6
Fixed in:
2.44.2-2.3.1
libsoup-2_4-1-32bit
SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12-LTSSSUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE OpenStack Cloud 6
Fixed in:
2.44.2-2.3.1
libsoup-lang
SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12-LTSSSUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE OpenStack Cloud 6
Fixed in:
2.44.2-2.3.1
typelib-1_0-Soup-2_4
SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12-LTSSSUSE Linux Enterprise Server for SAP Applications 12SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE OpenStack Cloud 6