https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:26:19.140392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:4560 ALSA-2025:4560 — Important: libsoup security update 2026-10-02T17:26:19.162105+00:00

Affected: AlmaLinux:8: libsoup, AlmaLinux:8: libsoup-devel

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

* libsoup: Integer overflow in append_param_quoted (CVE-2025-32050) * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052) * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053) * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906) * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911) * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913) * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421) * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-05232 bdu:2025-05232 2026-10-02T17:26:19.162175+00:00 bdu:2025-05232 https://cve.radiocsirt.org/vuln/euvd-2026-331252 EUVD-2026-331252 2026-10-02T17:26:19.162191+00:00 EUVD-2026-331252 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32052 fkie_cve-2025-32052 2026-10-02T17:26:19.162203+00:00

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

 https://cve.radiocsirt.org/vuln/ghsa-9qwg-ch53-9rxw GHSA-9qwg-ch53-9rxw 2026-10-02T17:26:19.162223+00:00

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-32052 msrc_CVE-2025-32052 — Libsoup: heap buffer overflow in sniff_unknown() 2026-10-02T17:26:19.162236+00:00 msrc_CVE-2025-32052 https://cve.radiocsirt.org/vuln/oesa-2025-1441 OESA-2025-1441 — libsoup security update 2026-10-02T17:26:19.162251+00:00

Affected: openEuler:22.03-LTS-SP4: libsoup, openEuler:24.03-LTS: libsoup, openEuler:24.03-LTS-SP1: libsoup, openEuler:20.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP3: libsoup

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.(CVE-2025-2784)

A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.(CVE-2025-32050)

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.(CVE-2025-32052)

A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read.(CVE-2025-32053)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15018-1 openSUSE-SU-2025:15018-1 — libsoup-2_4-1-2.74.3-8.1 on GA media 2026-10-02T17:26:19.162283+00:00

libsoup-2_4-1-2.74.3-8.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:4440 RHSA-2025:4440 — Red Hat Security Advisory: libsoup security update 2026-10-02T17:26:19.162306+00:00

libsoup: Integer overflow in append_param_quoted libsoup: Heap buffer overflow in sniff_unknown() libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() libsoup: Out of bounds reads in soup_headers_parse_request() libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server

 https://cve.radiocsirt.org/vuln/suse-su-2025:1503-1 SUSE-SU-2025:1503-1 — Security update for libsoup2 2026-10-02T17:26:19.162336+00:00

Security update for libsoup2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-32052 UBUNTU-CVE-2025-32052 2026-10-02T17:26:19.162352+00:00

Affected: Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0935 WID-SEC-W-2025-0935 — Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen 2026-10-02T17:26:19.162376+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen, Dateien zu manipulieren oder Informationen offenzulegen.