Red Hat Security AdvisoryRHSA-2025:8140
libsoup security update
Released 2025-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) libsoup-2.72.0-8.el9_2.5, libsoup-devel-2.72.0-8.el9_2.5
Fixes 4 records
Priority HIGH 72
A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01121 · Published 2025-05-19 · Partial fix · 3.6.5-3.el10_0.6, 2.62.2-9.el7_9 +9 CWE-191
Priority MEDIUM 64
A flaw was found in libsoup.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.00876 · Published 2025-04-03 · Partial fix · 3.6.5, 3.6.5-3.el10_0 +10 CWE-125
Priority MEDIUM 41
A flaw was found in libsoup.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01074 · Published 2025-04-03 · Partial fix · 3.6.5-3.el10_0.6, 2.62.2-9.el7_9 +9 CWE-770
Priority LOW 34
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00786 · Published 2025-04-14 · Partial fix · 3.6.5, 3.6.5-3.el10_0 +10 CWE-125
