SUSE-SU-2025:1504-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed heap buffer over-read in skipinsignificantspace when sniffing conten bsc1240750 - CVE-2025-32050: Fixed integer overflow in appendparamquoted bsc1240752 - CVE-2025-32051: Fixed segmentation fault when parsing malformed dat...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32052)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32052 advisory. - A flaw was found in libsoup. A vulnerability in the sniffunknown function May lead to heap buffer over- rea...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-2784)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2784 advisory. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-2784)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-2784 advisory. - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via...

libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read...

CVE-2025-21475 Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...

CVE-2025-21475 Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value...

CVE-2025-21459 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing per STA profile in ML IE...

CVE-2025-21459 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing per STA profile in ML IE...

CVE-2024-49847 Buffer Over-read in Multi-Mode Call Processor

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...

CVE-2024-49847 Buffer Over-read in Multi-Mode Call Processor

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...

CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor

Memory corruption while decoding of OTA messages from T3448 IE...

CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor

Memory corruption while decoding of OTA messages from T3448 IE...

CVE-2024-45568 Buffer Over-read in Camera Driver

Memory corruption due to improper bounds check while command handling in camera-kernel driver...

CVE-2024-45568 Buffer Over-read in Camera Driver

Memory corruption due to improper bounds check while command handling in camera-kernel driver...

MGASA-2025-0148 Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-32460...

Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-32460...

Important: libsoup

Issue Overview: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. CVE-2025-2784 Affected Packages...

Amazon Linux 2 : libsoup (ALAS-2025-2841)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2841 advisory. A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2025-941)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-941 advisory. A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds i...