-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 24 Jul 2025 10:40:02 +0100
Source: libsoup3
Architecture: source
Version: 3.6.5-3
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Closes: 1109685
Changes:
libsoup3 (3.6.5-3) unstable; urgency=medium
.
* Team upload
* d/p/soup-init-Use-libdl-instead-of-gmodule-in-soup2_is_loaded.patch:
Fix a deadlock in some use patterns with dlopen and GModule.
If earlier versions of libsoup were dlopen'd (without using GModule)
in thread A, while thread B is holding the GModule lock but not the
libdl lock, the process would deadlock: in this scenario, thread A
is holding the libdl lock and attempts to take the GModule lock,
while thread B is holding the GModule lock and attempts to take the
libdl lock.
For example, this is known to affect some mopidy plugins, which load
libsoup via souphttpsrc.
Avoid this by making the check for libsoup2 symbols call dlopen
directly, so that there is no lock ordering inconsistency.
(Closes: #1109685)
Checksums-Sha1:
ad87d3e938677ab265a438e6410bd5e672c7396b 3129 libsoup3_3.6.5-3.dsc
2140d09072fddcc16e53a399a823e3c9ab8adb3a 40440 libsoup3_3.6.5-3.debian.tar.xz
af7a8a50ac38dd9d3602c902a0202368ebcba0fd 12152 libsoup3_3.6.5-3_source.buildinfo
Checksums-Sha256:
3c05b5021f78aac165e4761d7c28d76b5a281c45f3cb4abaff399ca3d9d4d310 3129 libsoup3_3.6.5-3.dsc
c3941ea2f574f43d280a72bd377ee0502450cee87103c79255d9076d468881e2 40440 libsoup3_3.6.5-3.debian.tar.xz
d6f65577610dcdf70f102c3e1828515ef921e24c0aa1bc3162a99f8028c9fea7 12152 libsoup3_3.6.5-3_source.buildinfo
Files:
bb12897eb25aebe45f1702d459210cc2 3129 devel optional libsoup3_3.6.5-3.dsc
983f13c3a8321e38d65fa3f5bc9aaca5 40440 devel optional libsoup3_3.6.5-3.debian.tar.xz
2dfbc0ef9d6c0eb9c0005bc84997c09c 12152 devel optional libsoup3_3.6.5-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=4TcU
-----END PGP SIGNATURE-----
Attachment:
pgpwEDKM44P41.pgp
Description: PGP signature