OPENSUSE-SU-2025:15241-1 libsoup-3_0-0-3.6.5-6.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.5-6.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:02212-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing bsc1243314...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-4945: Add value checks for date/time parsing bsc1243314. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command liste...

libsoup security update

2.62.2-2.0.5 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 - CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 2.62.2-2.0.3 - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in - soupheaderparseparamliststrict Orabug: 37557504...

Oracle Linux 7 : libsoup (ELSA-2025-9179)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9179 advisory. - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 - CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 - Fixed CVE-2024-5253...

PT-2025-39526

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw exists in the cookie date handling logic of the libsoup HTTP library. Processing cookies with crafted expiration dates may lead to an out-of-bounds memory read, potentially exposing...

Huawei EulerOS: Security Advisory for libsoup (EulerOS-SA-2025-1707)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libsoup (EulerOS-SA-2025-1692)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2025-1707)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function...

EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2025-1692)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function...

CLSA-2025-1751133871 libsoup: Fix of CVE-2025-32907

CVE-2025-32907: fix resource consumption vulnerability in HTTP range requests...

SUSE-SU-2025:20453-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-4476: Fixed null pointer dereference that may lead to denial of service bsc1243422 - CVE-2025-4948: Fixed Integer Underflow in soupmultipartnewfrommessage Leading to Denial of Service in libsoup bsc1243332 - CVE-2025-4969: Fixed...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-4476: Fixed null pointer dereference that may lead to denial of service bsc1243422 CVE-2025-4948: Fixed Integer Underflow in soupmultipartnewfrommessage Leading to Denial of Service in libsoup bsc1243332 CVE-2025-4969: Fixed off-by-one...

The vulnerability of the soup_uri_decode_data_uri() function in the GNOME graphical interface library libsoup allows a attacker to cause a service failure.

The vulnerability of the soupuridecodedatauri function in the libsoup library, a GNOME graphical interface library, is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted POST reque...

The vulnerability of the libsoup library, related to the exposure of system data to unauthorized individuals, allows a violator to disclose protected information.

The vulnerability of the libsoup library relates to the exposure of system data by unauthorized individuals. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the soup_multipart_new_from_message() function in the libsoup library, a graphical interface library for GNOME, allows a attacker to cause a service failure.

The vulnerability of the soupmultipartnewfrommessage function in the GNOME graphical interface library libsoup is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup, which allows a attacker to trigger a service denial-of-service attack.

The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...

The vulnerability in the WebSocket protocol implementation of the libsoup graphical interface library for GNOME allows a attacker to cause a service failure.

The vulnerability of the WebSocket protocol implementation in the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...

RHSA-2025:9179 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

libsoup: Denial of Service attack to websocket server

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS...