Red Hat Security Advisory

RHSA-2024:9654

libsoup security update

Released 2024-11-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) libsoup-2.62.2-3.el7_9, libsoup-2.62.2-3.el7_9.ppc, libsoup-devel-2.62.2-3.el7_9 +1

Fixes 1 record

TI-2024-35200 CVE-2024-52530 · GHSA-37r8-854r-595c

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because…

MEDIUM 40

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Tran…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00783 Published 2024-11-11 Partial fix CWE-444