[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Marc Deslauriers
Oh, we don't track security updates in bugs, we track them in our tracker. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu. https://bugs.launchpad.net/bugs/1779901 Title: CVE-2018-12910 Status in

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Iain Lane
No worries. I was doing the Debian update anyway and this wasn't that much effort on top. :-) I had clicked on the CVE link in Launchpad, which goes to https://bugs.launchpad.net/bugs/cve/2018-12910. But I guess even if there was a bug, it'd probably have been private security and I wouldn't have

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Marc Deslauriers
Sorry about that. You can look up the CVE in our tracker, and see if someone is in the Assigned-to section: https://people.canonical.com/~ubuntu- security/cve/2018/CVE-2018-12910.html For a security update, it's probably best to just ask us. -- You received this bug notification because you

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-04 Thread Iain Lane
How could I have seen that so I didn't waste my time preparing debdiffs? Or is it just "ask"? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu. https://bugs.launchpad.net/bugs/1779901 Title:

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Leonidas S. Barbosa
https://usn.ubuntu.com/3701-1/ ** Changed in: libsoup2.4 (Ubuntu Xenial) Status: Confirmed => Fix Released ** Changed in: libsoup2.4 (Ubuntu Artful) Status: Confirmed => Fix Released ** Changed in: libsoup2.4 (Ubuntu Bionic) Status: Confirmed => Fix Released -- You

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Leonidas S. Barbosa
Hi, We already have updates going through QA. Soon as possibly they'll be published. Thanks! -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libsoup2.4 in Ubuntu. https://bugs.launchpad.net/bugs/1779901 Title:

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
I could have added Bug-Ubuntu I guess. Anyway, there you go. Michael supplied a test so I included that in the debdiffs to give some confidence. Tested build, install, upgrade. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
** Patch added: "1779901-bionic.debdiff" https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+attachment/5159215/+files/1779901-bionic.debdiff ** Changed in: libsoup2.4 (Ubuntu Xenial) Status: New => Confirmed ** Changed in: libsoup2.4 (Ubuntu Artful) Status: New

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
** Patch added: "1779901-artful.debdiff" https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+attachment/5159214/+files/1779901-artful.debdiff -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libsoup2.4 in

[Touch-packages] [Bug 1779901] Re: CVE-2018-12910

2018-07-03 Thread Iain Lane
** Patch added: "1779901-xenial.debdiff" https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/1779901/+attachment/5159213/+files/1779901-xenial.debdiff -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libsoup2.4 in