Most recent entries from all

ALSA-2025:0791 — Important: libsoup security update

Affected: AlmaLinux:9: libsoup, AlmaLinux:9: libsoup-devel

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

* libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-00232

EUVD-2026-258705

fkie_cve-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).

GHSA-5mc3-gwcr-mgc3

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.

msrc_CVE-2024-52531 — GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_par…

msrc_CVE-2024-52531

OESA-2024-2471 — libsoup security update

Affected: openEuler:22.03-LTS-SP1: libsoup, openEuler:24.03-LTS: libsoup, openEuler:22.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP3: libsoup, openEuler:20.03-LTS-SP4: libsoup

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es): GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.(CVE-2024-52530) GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.(CVE-2024-52531) GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.(CVE-2024-52532)

openSUSE-SU-2024:14488-1 — libsoup-3_0-0-3.6.0-2.1 on GA media

libsoup-3_0-0-3.6.0-2.1 on GA media

RHSA-2025:0847 — Red Hat Security Advisory: libsoup security update

libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict

SUSE-SU-2024:4290-1 — Security update for libsoup2

Security update for libsoup2

UBUNTU-CVE-2024-52531

Affected: Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3

WID-SEC-W-2024-3436 — GNOME: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNOME in den libsoup und glib Bibliotheken ausnutzen, um Daten zu manipulieren, um einen Denial of Service Zustand herbeizuführen und um nicht näher bekannte Auswirkungen zu erzielen.