SUSE-SU-2025:03026-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing bsc1243314...

The vulnerability of the GNOME graphical interface library libsoup allows a hacker to execute arbitrary code.

The vulnerability of the GNOME graphical interface library libsoup is related to a potential overflow condition during the processing of cookie files. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the GNOME graphical interface library libsoup allows a hacker to gain access to confidential information.

The vulnerability of the GNOME graphical interface library libsoup is related to the processing conditions for multi-component HTTP messages. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling bsc1243314 CVE-2025-4948: Fixed Integer Underflow in soupmultipartnewfrommessage Leading to Denial of Service bsc1243332 CVE-2025-4476: Fixed null pointer dereference leadi...

ROS-20250821-04

Vulnerability in libsoup library is related to disclosure of system data to unauthorized parties. Exploitation exploitation of the vulnerability could allow a remote attacker to disclose protected information. GNOME GUI libsoup library vulnerability is related to asymmetric resource consumption...

Linux Distros Unpatched Vulnerability : CVE-2025-32053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read. CVE-2025-32053 Note th...

Linux Distros Unpatched Vulnerability : CVE-2025-32913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a maliciou...

Linux Distros Unpatched Vulnerability : CVE-2025-32911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to...

Linux Distros Unpatched Vulnerability : CVE-2025-4948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web...

Linux Distros Unpatched Vulnerability : CVE-2025-32912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash...

Linux Distros Unpatched Vulnerability : CVE-2025-32052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over- read. CVE-2025-32052 Note that Nessus relies on the...

EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2025-1980)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages...

EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2025-1994)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2025-1934)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read.CVE-2025-32050 A...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-4948)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4948 advisory. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-4948)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4948 advisory. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly...

CVE-2025-4948 affecting package libsoup for versions less than 3.0.4-8

CVE-2025-4948 affecting package libsoup for versions less than 3.0.4-8. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2025-46421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the...

Huawei EulerOS: Security Advisory for libsoup (EulerOS-SA-2025-1980)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-8197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A global buffer overflow vulnerability was found in the soupheadernametostring function in Libsoup. The soupheadernametostring function does not validate the na...