https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:02:26.853667+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:0791 ALSA-2025:0791 — Important: libsoup security update 2026-10-04T16:02:27.085242+00:00

Affected: AlmaLinux:9: libsoup, AlmaLinux:9: libsoup-devel

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

* libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-00232 bdu:2025-00232 2026-10-04T16:02:27.085307+00:00 bdu:2025-00232 https://cve.radiocsirt.org/vuln/euvd-2026-258705 EUVD-2026-258705 2026-10-04T16:02:27.085325+00:00 EUVD-2026-258705 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52531 fkie_cve-2024-52531 2026-10-04T16:02:27.085337+00:00

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).

 https://cve.radiocsirt.org/vuln/ghsa-5mc3-gwcr-mgc3 GHSA-5mc3-gwcr-mgc3 2026-10-04T16:02:27.085359+00:00

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-52531 msrc_CVE-2024-52531 — GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_par… 2026-10-04T16:02:27.085375+00:00 msrc_CVE-2024-52531 https://cve.radiocsirt.org/vuln/oesa-2024-2471 OESA-2024-2471 — libsoup security update 2026-10-04T16:02:27.085394+00:00

Affected: openEuler:22.03-LTS-SP1: libsoup, openEuler:24.03-LTS: libsoup, openEuler:22.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP3: libsoup, openEuler:20.03-LTS-SP4: libsoup

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es): GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.(CVE-2024-52530) GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.(CVE-2024-52531) GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.(CVE-2024-52532)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14488-1 openSUSE-SU-2024:14488-1 — libsoup-3_0-0-3.6.0-2.1 on GA media 2026-10-04T16:02:27.085428+00:00

libsoup-3_0-0-3.6.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:0847 RHSA-2025:0847 — Red Hat Security Advisory: libsoup security update 2026-10-04T16:02:27.085446+00:00

libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict

 https://cve.radiocsirt.org/vuln/suse-su-2024:4290-1 SUSE-SU-2024:4290-1 — Security update for libsoup2 2026-10-04T16:02:27.085485+00:00

Security update for libsoup2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-52531 UBUNTU-CVE-2024-52531 2026-10-04T16:02:27.085549+00:00

Affected: Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3436 WID-SEC-W-2024-3436 — GNOME: Mehrere Schwachstellen 2026-10-04T16:02:27.085604+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNOME in den libsoup und glib Bibliotheken ausnutzen, um Daten zu manipulieren, um einen Denial of Service Zustand herbeizuführen und um nicht näher bekannte Auswirkungen zu erzielen.