CVE-2025-46420 affecting package libsoup for versions less than 3.4.4-5

CVE-2025-46420 affecting package libsoup for versions less than 3.4.4-5. A patched version of the package is available...

CVE-2025-46421 affecting package libsoup for versions less than 3.4.4-5

CVE-2025-46421 affecting package libsoup for versions less than 3.4.4-5. A patched version of the package is available...

CVE-2025-32052 affecting package libsoup for versions less than 3.4.4-5

CVE-2025-32052 affecting package libsoup for versions less than 3.4.4-5. A patched version of the package is available...

CVE-2025-32050 affecting package libsoup for versions less than 3.4.4-5

CVE-2025-32050 affecting package libsoup for versions less than 3.4.4-5. A patched version of the package is available...

CVE-2025-32051 affecting package libsoup for versions less than 3.4.4-5

CVE-2025-32051 affecting package libsoup for versions less than 3.4.4-5. A patched version of the package is available...

CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-32052 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-32050 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-32050 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-46421 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-46421 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-2784 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-2784 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-46420 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-46420 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

CVE-2025-32051 affecting package libsoup for versions less than 3.0.4-5

CVE-2025-32051 affecting package libsoup for versions less than 3.0.4-5. A patched version of the package is available...

USN-7490-2: libsoup regression

USN-7490-1 fixed vulnerabilities in libsoup. It was discovered that the fix for CVE-2025-32912 was incomplete. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tan Wei Chong discovered that libsoup incorrectly handled memory when parsing HTTP request...

USN-7490-2 libsoup2.4 regression

USN-7490-1 fixed vulnerabilities in libsoup. It was discovered that the fix for CVE-2025-32912 was incomplete. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tan Wei Chong discovered that libsoup incorrectly handled memory when parsing HTTP request...

libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value

A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server...

libsoup: Out of bounds reads in soup_headers_parse_request()

A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server...

libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...

libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header

A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

libsoup: Heap buffer overflow in sniff_unknown()

A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over-read...

libsoup: Integer overflow in append_param_quoted

A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read...