Scientific Linux Security Update : libsoup on SL6.x i386/x86_64
Medium Nessus Plugin ID 61102
SynopsisThe remote Scientific Linux host is missing one or more security updates.
Descriptionlibsoup is an HTTP client/library implementation for GNOME.
A directory traversal flaw was found in libsoup's SoupServer. If an application used SoupServer to implement an HTTP service, a remote attacker who is able to connect to that service could use this flaw to access any local files accessible to that application via a specially crafted request. (CVE-2011-2524)
All users of libsoup should upgrade to these updated packages, which contain a backported patch to resolve this issue. All running applications using libsoup's SoupServer must be restarted for the update to take effect.
SolutionUpdate the affected libsoup, libsoup-debuginfo and / or libsoup-devel packages.