[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Marc Deslauriers
Oh, we don't track security updates in bugs, we track them in our
tracker.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Fix Released
Status in libsoup2.4 source package in Artful:
  Fix Released
Status in libsoup2.4 source package in Bionic:
  Fix Released

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Iain Lane
No worries. I was doing the Debian update anyway and this wasn't that
much effort on top. :-)

I had clicked on the CVE link in Launchpad, which goes to
https://bugs.launchpad.net/bugs/cve/2018-12910. But I guess even if
there was a bug, it'd probably have been private security and I wouldn't
have seen it anyway.

Cheers!

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Fix Released
Status in libsoup2.4 source package in Artful:
  Fix Released
Status in libsoup2.4 source package in Bionic:
  Fix Released

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Marc Deslauriers
Sorry about that.

You can look up the CVE in our tracker, and see if someone is in the
Assigned-to section:

https://people.canonical.com/~ubuntu-
security/cve/2018/CVE-2018-12910.html

For a security update, it's probably best to just ask us.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Fix Released
Status in libsoup2.4 source package in Artful:
  Fix Released
Status in libsoup2.4 source package in Bionic:
  Fix Released

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Iain Lane
How could I have seen that so I didn't waste my time preparing debdiffs?
Or is it just "ask"?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Fix Released
Status in libsoup2.4 source package in Artful:
  Fix Released
Status in libsoup2.4 source package in Bionic:
  Fix Released

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Leonidas S. Barbosa
https://usn.ubuntu.com/3701-1/

** Changed in: libsoup2.4 (Ubuntu Xenial)
   Status: Confirmed => Fix Released

** Changed in: libsoup2.4 (Ubuntu Artful)
   Status: Confirmed => Fix Released

** Changed in: libsoup2.4 (Ubuntu Bionic)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Fix Released
Status in libsoup2.4 source package in Artful:
  Fix Released
Status in libsoup2.4 source package in Bionic:
  Fix Released

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Leonidas S. Barbosa
Hi,

We already have updates going through QA. Soon as possibly they'll be
published.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Confirmed
Status in libsoup2.4 source package in Artful:
  Confirmed
Status in libsoup2.4 source package in Bionic:
  Confirmed

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
I could have added Bug-Ubuntu I guess. Anyway, there you go.

Michael supplied a test so I included that in the debdiffs to give some
confidence.

Tested build, install, upgrade.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Confirmed
Status in libsoup2.4 source package in Artful:
  Confirmed
Status in libsoup2.4 source package in Bionic:
  Confirmed

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
** Patch added: "1779901-bionic.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+attachment/5159215/+files/1779901-bionic.debdiff

** Changed in: libsoup2.4 (Ubuntu Xenial)
   Status: New => Confirmed

** Changed in: libsoup2.4 (Ubuntu Artful)
   Status: New => Confirmed

** Changed in: libsoup2.4 (Ubuntu Bionic)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Confirmed
Status in libsoup2.4 source package in Artful:
  Confirmed
Status in libsoup2.4 source package in Bionic:
  Confirmed

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
** Patch added: "1779901-artful.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+attachment/5159214/+files/1779901-artful.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Confirmed
Status in libsoup2.4 source package in Artful:
  Confirmed
Status in libsoup2.4 source package in Bionic:
  Confirmed

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
** Patch added: "1779901-xenial.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+attachment/5159213/+files/1779901-xenial.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu.
https://bugs.launchpad.net/bugs/1779901

Title:
  CVE-2018-12910

Status in libsoup2.4 package in Ubuntu:
  Fix Released
Status in libsoup2.4 source package in Xenial:
  Confirmed
Status in libsoup2.4 source package in Artful:
  Confirmed
Status in libsoup2.4 source package in Bionic:
  Confirmed

Bug description:
  If you have appropriate permissions, you can view details at the
  following links:

  https://gitlab.gnome.org/GNOME/libsoup/issues/3
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp