🍜 "State of libsoup"
with Patrick Griffis at #GUADEC2025
📅 24 July 🕒 12:30 CEST 📍 Brescia
🔧 From 3.0 to what’s next—Patrick gives an update on GNOME’s HTTP library libsoup.
#BSI WID-SEC-2025-1140: [NEU] [mittel] #Red #Hat #Enterprise #Linux (#libsoup): Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff oder weitere nicht spezifizierte Angriffe durchzuführen.
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1140
#BSI WID-SEC-2025-1140: [NEU] [mittel] #Red #Hat #Enterprise #Linux (#libsoup): Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff oder weitere nicht spezifizierte Angriffe durchzuführen.
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1140
#BSI WID-SEC-2025-0935: [NEU] [hoch] #Red #Hat #Enterprise #Linux (#libsoup): Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen, Dateien zu manipulieren oder Informationen offenzulegen.
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0935
It is wild that I'm potentially solving a higgs-bugson in #GNOMECalendar's handling of some broken #CalDAV / #Webcal calendar providers (for servers using hardcore firewalling rules), a 6-years mystery… with a 1-liner fix that just sets a User-Agent string for #GNOME Calendar's #libsoup to identify itself when doing the initial URL validity check 🤨️
Thanks to @s3phy's ingenious network/HTTP troubleshooting!
https://gitlab.gnome.org/GNOME/gnome-calendar/-/merge_requests/424
This avoids some web servers or WAFs doing weird stuff with our requests which would lead to situations where our web calendar source discovery would face server errors,...
#Gnome Calculator can no longer run due to a failure to download a file that has currency exchanges. This is due to a #libsoup bug when using a VPN.
https://gitlab.gnome.org/GNOME/libsoup/-/issues/364
While the currency exchange has been really helpful. Maybe I should have a calculator that doesn't connect to the internet lol
I'm running Fedora Silverblue 38.20230509.0, and GNOME Calculator 44.0 via Flathub. I've been using GNOME Calculator for years, with no problems. Today, it suddenly stopped working....
@mucephie
I have just created a repository with experimental #Fortran interfaces for #libadwaita and #libsoup :
https://github.com/vmagnin/experimental_interfaces
More explanations are in the README.md file.
This repository contains experimental Fortran bindings for various C libraries, automatically generated with the cfwrapper program of the gtk-fortran project. - GitHub - vmagnin/experimental_interf...
I finally managed to connect #PicPlanner to the #nominatim API and get the search results as a JSON. So in principle my app is now capable of showing the desired information of sun, moon and milky way just by typing the name of a city into the search bar.
But: It is still not asynchronous, I have no error handling and the UI to select the correct search result is missing. Furthermore, my memory management is still a nightmare. But one step after another 😅