Red Hat Security AdvisoryRHSA-2024:9525
libsoup security update
Released 2024-11-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) libsoup-devel-2.62.3-2.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) libsoup-devel-2.62.3-2.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) libsoup-devel-2.62.3-2.el8_6.1
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) libsoup-2.62.3-2.el8_6.1
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) libsoup-2.62.3-2.el8_6.1
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) libsoup-2.62.3-2.el8_6.1
Fixes 1 record
Priority MEDIUM 40
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Tran…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00783 · Published 2024-11-11 · Partial fix CWE-444
