Most recent entries from all

ALSA-2024:9559 — Important: libsoup security update

Affected: AlmaLinux:9: libsoup, AlmaLinux:9: libsoup-devel

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

* libsoup: infinite loop while reading websocket data (CVE-2024-52532) * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-05738

EUVD-2026-258706

fkie_cve-2024-52532

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.

GHSA-f6qg-rg6j-cxgf

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.

msrc_CVE-2024-52532 — GNOME libsoup before 3.6.1 has an infinite loop and memory consumption. during the reading of certain patterns of WebSo…

msrc_CVE-2024-52532

OESA-2024-2471 — libsoup security update

Affected: openEuler:22.03-LTS-SP1: libsoup, openEuler:24.03-LTS: libsoup, openEuler:22.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP3: libsoup, openEuler:20.03-LTS-SP4: libsoup

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es): GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.(CVE-2024-52530) GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.(CVE-2024-52531) GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.(CVE-2024-52532)

openSUSE-SU-2024:14488-1 — libsoup-3_0-0-3.6.0-2.1 on GA media

libsoup-3_0-0-3.6.0-2.1 on GA media

SUSE-SU-2024:4290-1 — Security update for libsoup2

Security update for libsoup2

UBUNTU-CVE-2024-52532

Affected: Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.

WID-SEC-W-2024-3436 — GNOME: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNOME in den libsoup und glib Bibliotheken ausnutzen, um Daten zu manipulieren, um einen Denial of Service Zustand herbeizuführen und um nicht näher bekannte Auswirkungen zu erzielen.