{"id":"CVE-2024-52530","aliases":["ALSA-2024:9559","ALSA-2024:9573","AZL-53036","AZL-53159","CLSA-2025-1745530844","DEBIAN-CVE-2024-52530","DLA-3992-1","EUVD-2024-45940","GHSA-37r8-854r-595c","JLSEC-2026-1277","MGASA-2024-0382","OESA-2024-2471","OESA-2024-2531","RHSA-2024:9501","RHSA-2024:9524","RHSA-2024:9525","RHSA-2024:9559","RHSA-2024:9566","RHSA-2024:9570","RHSA-2024:9572","RHSA-2024:9573","RHSA-2024:9576","RHSA-2024:9654","RLSA-2024:9559","RLSA-2024:9573","SUSE-SU-2024:4290-1","SUSE-SU-2024:4349-1","SUSE-SU-2024:4352-1","SUSE-SU-2024:4355-1","SUSE-SU-2024:4365-1","SUSE-SU-2025:1518-1","SUSE-SU-2025:20105-1","SUSE-SU-2025:20252-1","UBUNTU-CVE-2024-52530","USN-7126-1","USN-7127-1","openSUSE-SU-2024:14489-1"],"status":"published","title":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0'...","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00783,"percentile":0.56498,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-444"],"published":"2024-11-11T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libsoup","fixed_in":["3.0.4-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libsoup","fixed_in":["3.4.4-2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup","fixed_in":["2.72.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup-devel","fixed_in":["2.72.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup-doc","fixed_in":["2.72.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libsoup2.4","fixed_in":["2.74.3-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsoup2.4","fixed_in":["2.74.3-8.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libsoup3","fixed_in":["3.2.3-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsoup3","fixed_in":["3.5.2-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libsoup3","fixed_in":["3.4.4-3.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup","fixed_in":["0:2.62.3-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-1.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup","fixed_in":["0:2.62.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-devel","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup-debuginfo","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup-debugsource","fixed_in":["0:2.62.3-2.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup","fixed_in":["0:2.72.0-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.72.0-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-debugsource","fixed_in":["0:2.72.0-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-devel","fixed_in":["0:2.72.0-8.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup","fixed_in":["0:2.72.0-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.72.0-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-debugsource","fixed_in":["0:2.72.0-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-devel","fixed_in":["0:2.72.0-8.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup","fixed_in":["0:2.72.0-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-debuginfo","fixed_in":["0:2.72.0-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-debugsource","fixed_in":["0:2.72.0-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-devel","fixed_in":["0:2.72.0-8.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libsoup","fixed_in":["0:2.62.2-3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libsoup-debuginfo","fixed_in":["0:2.62.2-3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libsoup-devel","fixed_in":["0:2.62.2-3.el7_9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","fixed_in":["2.62.1-1ubuntu0.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","fixed_in":["2.70.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","fixed_in":["2.74.2-3ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","fixed_in":["3.0.7-0ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","fixed_in":["2.74.3-6ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","fixed_in":["3.4.4-5ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-1+deb12u1"}]}],"versions":["2.74.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-8.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-0+deb12u1"}]}],"versions":["3.2.2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-2+deb11u1"}]}],"versions":["2.72.0-2"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"Soup3_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-1.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-5.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-4.oe2403"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-5.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-5.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71.0-4.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-3.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-3.el7_9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_5.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-6.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-5.12.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-5.12.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.1-1ubuntu0.4+esm1"}]}],"versions":["2.60.1-1","2.60.2-1","2.60.2-2","2.60.3-1","2.61.90-1","2.62.0-1","2.62.1-1","2.62.1-1ubuntu0.1","2.62.1-1ubuntu0.3","2.62.1-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.0-1ubuntu0.1"}]}],"versions":["2.68.2-0ubuntu1","2.68.2-1","2.68.2-2","2.68.2-2build2","2.69.90-1","2.70.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-3ubuntu0.1"}]}],"versions":["2.72.0-3ubuntu3","2.74.1-1","2.74.2-2","2.74.2-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-0ubuntu1+esm1"}]}],"versions":["3.0.4-2","3.0.4-3","3.0.5-1","3.0.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-6ubuntu1.1"}]}],"versions":["2.74.3-1","2.74.3-2","2.74.3-3","2.74.3-6","2.74.3-6build1","2.74.3-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5ubuntu0.1"}]}],"versions":["3.4.2-4","3.4.4-1","3.4.4-2","3.4.4-4","3.4.4-5","3.4.4-5build1","3.4.4-5build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.1-1ubuntu0.4+esm1"}]}],"versions":["2.60.1-1","2.60.2-1","2.60.2-2","2.60.3-1","2.61.90-1","2.62.0-1","2.62.1-1","2.62.1-1ubuntu0.1","2.62.1-1ubuntu0.3","2.62.1-1ubuntu0.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.0-1ubuntu0.1"}]}],"versions":["2.68.2-0ubuntu1","2.68.2-1","2.68.2-2","2.68.2-2build2","2.69.90-1","2.70.0-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-3ubuntu0.1"}]}],"versions":["2.72.0-3ubuntu3","2.74.1-1","2.74.2-2","2.74.2-3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-6ubuntu1.1"}]}],"versions":["2.74.3-1","2.74.3-2","2.74.3-3","2.74.3-6","2.74.3-6build1","2.74.3-6ubuntu1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-0ubuntu1+esm1"}]}],"versions":["3.0.4-2","3.0.4-3","3.0.5-1","3.0.7-0ubuntu1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5ubuntu0.1"}]}],"versions":["3.4.2-4","3.4.4-1","3.4.4-2","3.4.4-4","3.4.4-5","3.4.4-5build1","3.4.4-5build2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-4.1"}]}],"bundled":3}],"products":[{"vendor":"gnome","product":"libsoup"}],"references":[{"url":"https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home","tags":["Vendor Advisory","web","article","report"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/377","tags":["Exploit","Issue Tracking","report","web","article"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/402","tags":["Product","fix","web","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00014.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52530","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-37r8-854r-595c"},{"url":"https://access.redhat.com/errata/RHSA-2024:9559","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-52530","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-52532","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325276","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325284","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9559.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9573","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-9573.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745530844.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52530.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-52530","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0382.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33765","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/11/09/2","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2024/11/12/8","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7126-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7127-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52532","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2531","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9501","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325284","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9501.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-52530","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9524","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9524.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9525","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9525.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325276","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9559.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-52532","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/391","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/410","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9566","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9566.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9570","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9570.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9572","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9572.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9573.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9576","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9576.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9654","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9654.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9559","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9573","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244290-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1233285","tags":["report"]},{"url":"https://bugzilla.suse.com/1233287","tags":["report"]},{"url":"https://bugzilla.suse.com/1233292","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52532","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244349-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244352-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244355-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244365-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251518-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240750","tags":["report"]},{"url":"https://bugzilla.suse.com/1240752","tags":["report"]},{"url":"https://bugzilla.suse.com/1240756","tags":["report"]},{"url":"https://bugzilla.suse.com/1240757","tags":["report"]},{"url":"https://bugzilla.suse.com/1241164","tags":["report"]},{"url":"https://bugzilla.suse.com/1241222","tags":["report"]},{"url":"https://bugzilla.suse.com/1241686","tags":["report"]},{"url":"https://bugzilla.suse.com/1241688","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46421","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520105-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520252-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-52530","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-52531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-52532","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XPGNGXYLDM752SEEDHAXAPSLNGZIY5CP/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-52530","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T00:00:00Z","modified":"2025-11-03T22:28:35.875Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:34:03.333404Z"}],"euvd":[{"id":"EUVD-2024-45940","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T00:00:00Z","modified":"2025-11-03T22:28:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:49:29.890052Z"}],"ghsa":[{"id":"GHSA-37r8-854r-595c","title":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0'...","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T21:31:49Z","modified":"2025-11-04T00:32:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T15:04:30.147215Z"}],"nvd":[{"id":"CVE-2024-52530","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T20:15:20.247Z","modified":"2026-06-17T08:07:23.763Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:10:36.931115Z"}],"osv":[{"id":"CVE-2024-52530","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T00:00:00Z","modified":"2026-10-28T02:31:06.471603041Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"DEBIAN-CVE-2024-52530","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T20:15:20.247Z","modified":"2026-11-02T12:03:08.943801197Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"JLSEC-2026-1277","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2026-08-13T09:38:52.525Z","modified":"2026-08-13T09:45:03.325537354Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2024-2471","title":"libsoup security update","description":"libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because \u0026apos;\\0\u0026apos; characters at the end of header names are ignored, i.e., a \u0026quot;Transfer-Encoding\\0: chunked\u0026quot; header is treated the same as a \u0026quot;Transfer-Encoding: chunked\u0026quot; header.(CVE-2024-52530)\r\n\r\nGNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.(CVE-2024-52531)\r\n\r\nGNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients.(CVE-2024-52532)","status":"published","published":"2024-11-22T11:07:57Z","modified":"2026-08-18T01:18:41.502195495Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2531","title":"libsoup3 security update","description":"Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages.\r\n\r\nSecurity Fix(es):\r\n\r\nGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because \u0026apos;\\0\u0026apos; characters at the end of header names are ignored, i.e., a \u0026quot;Transfer-Encoding\\0: chunked\u0026quot; header is treated the same as a \u0026quot;Transfer-Encoding: chunked\u0026quot; header.(CVE-2024-52530)","status":"published","published":"2024-12-06T11:08:01Z","modified":"2026-08-18T01:18:42.675845319Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2024:9501","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:46:13Z","modified":"2026-06-26T12:22:23.712235031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9524","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:46:32Z","modified":"2026-06-26T12:22:23.695039987Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9525","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:46:23Z","modified":"2026-06-26T12:22:23.654799412Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9559","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:46:43Z","modified":"2026-03-18T11:36:26.757284Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9566","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:46:53Z","modified":"2026-06-26T12:22:23.77589584Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9570","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-21T21:56:46Z","modified":"2026-03-18T11:32:15.383765Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9572","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:47:03Z","modified":"2026-03-18T11:36:25.271659Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9573","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:47:13Z","modified":"2026-06-26T12:22:23.77698551Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9576","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-21T21:56:56Z","modified":"2026-03-18T11:36:27.730728Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9654","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2024-11-15T20:47:29Z","modified":"2026-03-18T11:36:27.532217Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2024-52530","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T20:15:00Z","modified":"2026-04-22T15:18:35.334352Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:55:11.182485Z"},{"id":"ALSA-2024:9559","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.  \n\nSecurity Fix(es):  \n\n  * libsoup: infinite loop while reading websocket data (CVE-2024-52532)\n  * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-13T00:00:00Z","modified":"2026-10-29T11:32:12.219786567Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9573","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.  \n\nSecurity Fix(es):  \n\n  * libsoup: infinite loop while reading websocket data (CVE-2024-52532)\n  * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-13T00:00:00Z","modified":"2026-10-29T11:02:22.111189128Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-53036","title":"CVE-2024-52530 affecting package libsoup for versions less than 3.0.4-2","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T20:15:20Z","modified":"2026-04-21T04:33:34.664626Z","updated_at":"2026-11-02T15:28:06.595149Z"},{"id":"AZL-53159","title":"CVE-2024-52530 affecting package libsoup for versions less than 3.4.4-2","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\\0' characters at the end of header names are ignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the same as a \"Transfer-Encoding: chunked\" header.","status":"published","published":"2024-11-11T20:15:20Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.828909Z"},{"id":"CLSA-2025-1745530844","title":"libsoup: Fix of CVE-2024-52530","description":"- CVE-2024-52530: prevent HTTP request smuggling by properly handling '0'\n  characters at the end of header names","status":"published","published":"2025-04-24T21:40:50Z","modified":"2026-06-01T00:30:40.324614013Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-3992-1","title":"libsoup2.4 - security update","status":"published","published":"2024-12-12T00:00:00Z","modified":"2026-03-09T01:23:00.495132Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0382","title":"Updated libsoup3 \u0026 libsoup packages fix security vulnerabilities","description":"GNOME libsoup before 3.6.0 allows HTTP request smuggling in some\nconfigurations because '\\0' characters at the end of header names are\nignored, i.e., a \"Transfer-Encoding\\0: chunked\" header is treated the\nsame as a \"Transfer-Encoding: chunked\" header. (CVE-2024-52530)\nGNOME libsoup before 3.6.1 allows a buffer overflow in applications that\nperform conversion to UTF-8 in soup_header_parse_param_list_strict.\nInput received over the network cannot trigger this. (CVE-2024-52531)\nGNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.\nduring the reading of certain patterns of WebSocket data from clients.\n(CVE-2024-52532)\n","status":"published","published":"2024-11-29T23:36:19Z","modified":"2026-04-16T04:43:24.135444214Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14489-1","title":"libsoup-2_4-1-2.74.3-4.1 on GA media","description":"These are all security issues fixed in the libsoup-2_4-1-2.74.3-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-13T00:00:00Z","modified":"2026-02-04T04:14:03.23293Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RLSA-2024:9559","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.\n\nSecurity Fix(es):\n\n* libsoup: infinite loop while reading websocket data (CVE-2024-52532)\n\n* libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:49.937392Z","modified":"2026-02-05T15:00:06.872206Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2024:9573","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.\n\nSecurity Fix(es):\n\n* libsoup: infinite loop while reading websocket data (CVE-2024-52532)\n\n* libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-11-19T16:00:48.844671Z","modified":"2026-02-05T02:45:08.167303Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:4290-1","title":"Security update for libsoup2","description":"This update for libsoup2 fixes the following issues:\n\n  - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285)\n  - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292)\n  - CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)\n\n","status":"published","published":"2024-12-11T11:10:42Z","modified":"2026-02-04T04:12:31.542862Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4349-1","title":"Security update for libsoup2","description":"This update for libsoup2 fixes the following issues:\n\n - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285)\n - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292)\n - CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)\n\n","status":"published","published":"2024-12-17T08:52:28Z","modified":"2026-02-04T02:46:50.289461Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4352-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285)\n- CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292)\n- CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)\n\nOther fixes:\n\n- websocket-test: disconnect error copy after\n  the test ends (glgo#GNOME/libsoup#391).\n- fix an intermittent test failure\n  (glgo#GNOME/soup#399).\n- Increase test timeout on s390x. The http2-body-stream test can be\n  slow and sometimes times out in our builds.\n","status":"published","published":"2024-12-17T10:01:26Z","modified":"2026-02-04T03:05:50.366Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4355-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285)                                                               \n- CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292)                                                                 \n- CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)\n\nOther fixes:\n- websocket-test: disconnect error copy after the test ends (glgo#GNOME/libsoup#391).\n- fix an intermittent test failure (glgo#GNOME/soup#399).\n","status":"published","published":"2024-12-17T12:35:14Z","modified":"2025-05-02T04:37:12.845001Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4365-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:                                                                                                                \n\n- CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285)                                                               \n- CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292)                                                                 \n- CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)\n\nOther fixes:\n- websocket-test: disconnect error copy after\n  the test ends (glgo#GNOME/libsoup#391).\n- fix an intermittent test failure\n  (glgo#GNOME/soup#399).\n- updated to version 2.68.4.\n","status":"published","published":"2024-12-17T15:58:31Z","modified":"2026-02-04T03:38:12.59632Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1518-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285)\n - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292)\n - CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750)\n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756)\n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222)\n - CVE-2025-32914: Fixed out of bounds read  in `soup_multipart_new_from_message()` (bsc#1241164)\n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686)\n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688)\n","status":"published","published":"2025-05-08T19:35:59Z","modified":"2026-02-04T04:09:23.525476Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20105-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285).\n- CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292).\n- CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287).\n","status":"published","published":"2025-02-03T09:17:47Z","modified":"2026-03-23T04:47:08.743115Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20252-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2024-52530: strictly don't allow NUL bytes in headers (bsc#1233285 glgo#GNOME/libsoup#377).\n- CVE-2024-52532: websocket: Process the frame as soon as we read data (bsc#1233287 glgo#GNOME/libsoup#391).\n- CVE-2024-52531: be more robust against invalid input when parsing params (bsc#1233292 glgo#GNOME/libsoup!407).\n","status":"published","published":"2025-03-28T13:54:44Z","modified":"2026-03-23T04:50:45.386108Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7126-1","title":"libsoup2.4 vulnerabilities","description":"It was discovered that libsoup ignored certain characters at the end of\nheader names. A remote attacker could possibly use this issue to perform\na HTTP request smuggling attack. (CVE-2024-52530)\n\nIt was discovered that libsoup did not correctly handle memory while\nperforming UTF-8 conversions. An attacker could possibly use this issue\nto cause a denial of service or execute arbitrary code. (CVE-2024-52531)\n\nIt was discovered that libsoup could enter an infinite loop when reading\ncertain websocket data. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2024-52532)\n","status":"published","published":"2024-11-27T00:38:53Z","modified":"2026-04-27T17:37:07.456095Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7127-1","title":"libsoup3 vulnerabilities","description":"It was discovered that libsoup ignored certain characters at the end of\nheader names. A remote attacker could possibly use this issue to perform\na HTTP request smuggling attack. This issue only affected Ubuntu 22.04 LTS\nand Ubuntu 24.04 LTS. (CVE-2024-52530)\n\nIt was discovered that libsoup did not correctly handle memory while\nperforming UTF-8 conversions. An attacker could possibly use this issue\nto cause a denial of service or execute arbitrary code. (CVE-2024-52531)\n\nIt was discovered that libsoup could enter an infinite loop when reading\ncertain websocket data. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2024-52532)\n","status":"published","published":"2024-11-27T00:29:53Z","modified":"2026-04-27T17:36:26.677284Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}