Re: CVE-2017-2885 libsoup - stack based buffer overflow with HTTP Chunked Encoding

From: Tobias Mueller <tobiasmue gnome org>
To: Bastien Nocera <bnocera redhat com>
Cc: distributor-list gnome org, security gnome org
Subject: Re: CVE-2017-2885 libsoup - stack based buffer overflow with HTTP Chunked Encoding
Date: Thu, 10 Aug 2017 14:49:57 +0200

On Do, 2017-08-10 at 08:47 -0400, Bastien Nocera wrote:

This is a galeon bug from 2002.

ouch
somehow, the last digit got chopped off. Sorry :(

https://bugzilla.gnome.org/show_bug.cgi?id=785774

References:
- CVE-2017-2885 libsoup - stack based buffer overflow with HTTP Chunked Encoding
  - From: Tobias Mueller
- Re: CVE-2017-2885 libsoup - stack based buffer overflow with HTTP Chunked Encoding
  - From: Bastien Nocera