Read the docs
Red Hat Security Advisory

RHSA-2025:7505

libsoup3 security update

Released 2025-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2025-23927 CVE-2025-32906 · GHSA-f4vp-qjpg-x8wq

Libsoup: out of bounds reads in soup_headers_parse_request()

Priority LOW 35

A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01286 Published 2025-04-14 Partial fix · 3.6.5, 3.6.5-3.el10_0 +12 CWE-125
TI-2025-23935 CVE-2025-32914 · GHSA-89g2-jrcc-p8r7

Out-of-bounds read in libsoup

Priority LOW 34

A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00786 Published 2025-04-14 Partial fix · 3.6.5, 3.6.5-3.el10_0 +10 CWE-125
TI-2025-23933 CVE-2025-32912 · GHSA-hhmv-6rqc-qrc8

NULL pointer dereference in libsoup

Priority LOW 29

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00463 Published 2025-04-14 Partial fix · 3.6.5, 3.6.5-3.el10_0 CWE-476