{"id":"CVE-2025-32913","aliases":["ALSA-2025:4560","ALSA-2025:7436","ALSA-2025:8292","AZL-60389","AZL-60402","CLSA-2025-1750784473","CLSA-2025-1752088985","CLSA-2025-1752089185","CLSA-2025-1752126372","DEBIAN-CVE-2025-32913","DLA-4140-1","EUVD-2025-10899","GHSA-9589-mpwg-8xq6","MGASA-2025-0261","OESA-2025-1460","RHSA-2025:21657","RHSA-2025:4439","RHSA-2025:4440","RHSA-2025:4508","RHSA-2025:4538","RHSA-2025:4560","RHSA-2025:4568","RHSA-2025:4609","RHSA-2025:4624","RHSA-2025:7436","RHSA-2025:8292","RHSA-2025:9179","RLSA-2025:4560","RLSA-2025:8292","ROOT-OS-DEBIAN-12-CVE-2025-32913","SUSE-SU-2025:01504-1","SUSE-SU-2025:01794-1","SUSE-SU-2025:01801-1","SUSE-SU-2025:01802-1","SUSE-SU-2025:01864-1","SUSE-SU-2025:1504-1","SUSE-SU-2025:1510-1","SUSE-SU-2025:20375-1","SUSE-SU-2025:20446-1","UBUNTU-CVE-2025-32913","USN-7490-1","USN-7490-3","openSUSE-SU-2025:15189-1"],"status":"published","title":"Libsoup: null pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in content-disposition header","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00856,"percentile":0.58835,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-04-14T13:37:36Z","modified":"2026-11-06T01:21:30Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libsoup","fixed_in":["3.0.4-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libsoup","fixed_in":["3.4.4-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsoup2.4","fixed_in":["2.74.3-10.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsoup3","fixed_in":["3.6.4-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"libsoup3","fixed_in":["3.2.3-0+deb12u2.root.io.4","3.2.3-0+deb12u2.root.io.3","3.2.3-0+deb12u2.root.io.5","3.2.3-0+deb12u2.aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"libsoup2.4","fixed_in":["2.74.3-1+deb12u1.aikido.3","2.74.3-1+deb12u1.aikido.4","2.74.3-1+deb12u1.aikido.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-libsoup3","fixed_in":["3.2.3-0+deb12u2.root.io.4","3.2.3-0+deb12u2.root.io.3","3.2.3-0+deb12u2.root.io.5","3.2.3-0+deb12u2.aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-libsoup2.4","fixed_in":["2.74.3-1+deb12u1.aikido.3","2.74.3-1+deb12u1.aikido.4","2.74.3-1+deb12u1.aikido.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsoup2.4","fixed_in":["2.52.2-1ubuntu0.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","fixed_in":["2.62.1-1ubuntu0.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","fixed_in":["2.70.0-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","fixed_in":["2.74.2-3ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","fixed_in":["3.0.7-0ubuntu1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","fixed_in":["2.74.3-6ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","fixed_in":["3.4.4-5ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-10.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-10.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_2.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_2.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsoup-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-8.el9_2.tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-2.0.1.el7.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-2.0.1.el7.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-2.0.1.el7.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-2.0.1.el7.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-2.0.1.el7.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-2.0.1.el7.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74.3-1","2.74.3-1+deb12u1","2.74.3-10","2.74.3-10.1","2.74.3-11","2.74.3-2","2.74.3-3","2.74.3-3.1~exp1","2.74.3-3.1~exp2","2.74.3-3.1~exp3","2.74.3-5","2.74.3-6","2.74.3-7","2.74.3-8","2.74.3-8.1","2.74.3-9"]},{"source":"osv","ecosystem":"Debian:13","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-10.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.2-2","3.2.3-0+deb12u1","3.2.3-0+deb12u2","3.3.1-1","3.4.0-1","3.4.1-1","3.4.2-1","3.4.2-2","3.4.2-3","3.4.2-4","3.4.3-1","3.4.4-1","3.4.4-2","3.4.4-3","3.4.4-4","3.4.4-5","3.5.2-1","3.6.0-1","3.6.0-2","3.6.0-3","3.6.0-4","3.6.1-1","3.6.4-1","3.6.4-2","3.6.4-3","3.6.5-1","3.6.5-2","3.6.5-3","3.6.5-4","3.6.5-5","3.6.5-6","3.6.5-7","3.6.5-8","3.6.5-9","3.6.6-1","3.8.0-1","3.8.0-2","3.8.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-2+deb11u2"}]}],"versions":["2.72.0-2","2.72.0-2+deb11u1"],"bundled":11},{"source":"osv","ecosystem":"Mageia:9","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.2.mga9"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:9","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-1.2.mga9"}]}],"bundled":18},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71.0-6.oe2003sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-7.oe2203sp3"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-7.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-7.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-7.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-9.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-9.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-9.el7_9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_0.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_4.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-8.el9_2.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-1.el8_2.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-3.el8_8.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_4.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-2.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-10.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-10.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-10.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.72.0-10.el9_6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-6.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-6.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libsoup-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.2-6.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.62.3-8.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Root:Debian:12","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-0+deb12u2.root.io.4"},{"fixed":"3.2.3-0+deb12u2.root.io.3"},{"fixed":"3.2.3-0+deb12u2.root.io.5"},{"fixed":"3.2.3-0+deb12u2.aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-1+deb12u1.aikido.3"},{"fixed":"2.74.3-1+deb12u1.aikido.4"},{"fixed":"2.74.3-1+deb12u1.aikido.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-0+deb12u2.root.io.4"},{"fixed":"3.2.3-0+deb12u2.root.io.3"},{"fixed":"3.2.3-0+deb12u2.root.io.5"},{"fixed":"3.2.3-0+deb12u2.aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-1+deb12u1.aikido.3"},{"fixed":"2.74.3-1+deb12u1.aikido.4"},{"fixed":"2.74.3-1+deb12u1.aikido.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.7.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-5.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-5.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.7.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.7.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-slfo.1.1_3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.2-1ubuntu0.3+esm1"}]}],"versions":["2.50.0-2debian1","2.52.1-1","2.52.2-1","2.52.2-1ubuntu0.1","2.52.2-1ubuntu0.2","2.52.2-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.1-1ubuntu0.4+esm2"}]}],"versions":["2.60.1-1","2.60.2-1","2.60.2-2","2.60.3-1","2.61.90-1","2.62.0-1","2.62.1-1","2.62.1-1ubuntu0.1","2.62.1-1ubuntu0.3","2.62.1-1ubuntu0.4","2.62.1-1ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.0-1ubuntu0.3"}]}],"versions":["2.68.2-0ubuntu1","2.68.2-1","2.68.2-2","2.68.2-2build2","2.69.90-1","2.70.0-1","2.70.0-1ubuntu0.1","2.70.0-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-3ubuntu0.3"}]}],"versions":["2.72.0-3ubuntu3","2.74.1-1","2.74.2-2","2.74.2-3","2.74.2-3ubuntu0.1","2.74.2-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-0ubuntu1+esm3"}]}],"versions":["3.0.4-2","3.0.4-3","3.0.5-1","3.0.7-0ubuntu1","3.0.7-0ubuntu1+esm1","3.0.7-0ubuntu1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-6ubuntu1.3"}]}],"versions":["2.74.3-1","2.74.3-2","2.74.3-3","2.74.3-6","2.74.3-6build1","2.74.3-6ubuntu1","2.74.3-6ubuntu1.1","2.74.3-6ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5ubuntu0.3"}]}],"versions":["3.4.2-4","3.4.4-1","3.4.4-2","3.4.4-4","3.4.4-5","3.4.4-5build1","3.4.4-5build2","3.4.4-5ubuntu0.1","3.4.4-5ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.2-1ubuntu0.3+esm1"}]}],"versions":["2.50.0-2debian1","2.52.1-1","2.52.2-1","2.52.2-1ubuntu0.1","2.52.2-1ubuntu0.2","2.52.2-1ubuntu0.3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.1-1ubuntu0.4+esm2"}]}],"versions":["2.60.1-1","2.60.2-1","2.60.2-2","2.60.3-1","2.61.90-1","2.62.0-1","2.62.1-1","2.62.1-1ubuntu0.1","2.62.1-1ubuntu0.3","2.62.1-1ubuntu0.4","2.62.1-1ubuntu0.4+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.0-1ubuntu0.3"}]}],"versions":["2.68.2-0ubuntu1","2.68.2-1","2.68.2-2","2.68.2-2build2","2.69.90-1","2.70.0-1","2.70.0-1ubuntu0.1","2.70.0-1ubuntu0.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-3ubuntu0.3"}]}],"versions":["2.72.0-3ubuntu3","2.74.1-1","2.74.2-2","2.74.2-3","2.74.2-3ubuntu0.1","2.74.2-3ubuntu0.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-6ubuntu1.3"}]}],"versions":["2.74.3-1","2.74.3-2","2.74.3-3","2.74.3-6","2.74.3-6build1","2.74.3-6ubuntu1","2.74.3-6ubuntu1.1","2.74.3-6ubuntu1.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-0ubuntu1+esm3"}]}],"versions":["3.0.4-2","3.0.4-3","3.0.5-1","3.0.7-0ubuntu1","3.0.7-0ubuntu1+esm1","3.0.7-0ubuntu1+esm2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5ubuntu0.3"}]}],"versions":["3.4.2-4","3.4.4-1","3.4.4-2","3.4.4-4","3.4.4-5","3.4.4-5build1","3.4.4-5build2","3.4.4-5ubuntu0.1","3.4.4-5ubuntu0.2"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-11.1"}]}],"bundled":7}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:21657","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4439","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4440","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4508","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4538","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4560","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4568","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4609","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4624","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7436","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8292","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32913","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359357","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/435","tags":["report","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00036.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32913","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9179","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9589-mpwg-8xq6"},{"url":"https://access.redhat.com/security/cve/CVE-2025-32050","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32052","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32053","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32906","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32911","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-46420","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-46421","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357067","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357069","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357070","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359341","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359355","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359357","tags":["report"]},{"url":"https://bugzilla.redhat.com/2361962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2361963","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-4560.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32907","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359342","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7436.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27363","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32909","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32910","tags":["report"]},{"url":"https://bugzilla.redhat.com/2351357","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359353","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359354","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-8292.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1750784473.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1752088985.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1752089185.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1752126372.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32913.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32913","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0261.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34187","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7432-1","tags":["advisory"]},{"url":"https://openwall.com/lists/oss-security/2025/04/18/4","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/53THXHSDPP4TLMFRSP5DPLY4DK72M7XY/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7543-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NK7USYFSJPRTIVISSEDBLS53JCM5ETOI/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EPLHUVQI4JICGWTVGG7KI7D4BMHB34YD/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32912","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399627","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21657.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-2784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-2784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2784","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/422","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4945","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4945","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/448","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4948","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/449","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11021","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11021","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/459","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32049","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/390","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/408","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32906","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/404","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32911","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/433","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32913","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32914","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/436","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361963","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4439.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32907","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/428","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-46420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46420","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/438","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-46421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46421","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/439","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357070","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4440.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32050","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/424","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32052","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/425","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32053","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/426","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4508.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4538.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4560.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4568.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4609.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4624.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7436.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359354","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8292.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27363","tags":["advisory"]},{"url":"https://www.facebook.com/security/advisories/cve-2025-27363","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32909","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/431","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32910","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/432","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9179.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4560","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8292","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501504-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240750","tags":["report"]},{"url":"https://bugzilla.suse.com/1240752","tags":["report"]},{"url":"https://bugzilla.suse.com/1240754","tags":["report"]},{"url":"https://bugzilla.suse.com/1240756","tags":["report"]},{"url":"https://bugzilla.suse.com/1240757","tags":["report"]},{"url":"https://bugzilla.suse.com/1241162","tags":["report"]},{"url":"https://bugzilla.suse.com/1241164","tags":["report"]},{"url":"https://bugzilla.suse.com/1241214","tags":["report"]},{"url":"https://bugzilla.suse.com/1241222","tags":["report"]},{"url":"https://bugzilla.suse.com/1241223","tags":["report"]},{"url":"https://bugzilla.suse.com/1241226","tags":["report"]},{"url":"https://bugzilla.suse.com/1241238","tags":["report"]},{"url":"https://bugzilla.suse.com/1241252","tags":["report"]},{"url":"https://bugzilla.suse.com/1241263","tags":["report"]},{"url":"https://bugzilla.suse.com/1241686","tags":["report"]},{"url":"https://bugzilla.suse.com/1241688","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46421","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501794-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243332","tags":["report"]},{"url":"https://bugzilla.suse.com/1243423","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4969","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501801-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501802-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501864-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251504-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251510-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520375-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520446-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32913","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/422","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7490-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7490-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46421","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LI34B57WJ4B5UMQTOCNXAAI3NVKDGJWF/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32913","title":"Libsoup: null pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in content-disposition header","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T13:37:36.587Z","modified":"2026-11-04T21:26:22.438Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2025-10899","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T13:37:36Z","modified":"2026-11-04T21:26:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T22:46:32.144626Z"}],"ghsa":[{"id":"GHSA-9589-mpwg-8xq6","title":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is...","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T15:31:58Z","modified":"2026-06-26T00:33:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:08:59.978633Z"}],"nvd":[{"id":"CVE-2025-32913","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T14:15:24.86Z","modified":"2026-11-04T22:17:32.883Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-04T23:43:37.864413Z"}],"osv":[{"id":"CVE-2025-32913","title":"Libsoup: null pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in content-disposition header","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T13:37:36.587Z","modified":"2026-11-06T01:21:30.213014178Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-06T02:03:53.554046Z"},{"id":"DEBIAN-CVE-2025-32913","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T14:15:24.86Z","modified":"2026-11-05T09:47:33.552364235Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2025-1460","title":"libsoup security update","description":"libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.(CVE-2025-32906)\n\nA flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.(CVE-2025-32909)\n\nA flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.(CVE-2025-32910)\n\nA flaw was found in libsoup, which is vulnerable to a use-after-free memory issue not on the heap in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.(CVE-2025-32911)\n\nA flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.(CVE-2025-32912)\n\nA flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.(CVE-2025-32913)","status":"published","published":"2025-04-25T11:08:33Z","modified":"2026-08-18T01:18:50.526590793Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:21657","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-11-18T10:11:24Z","modified":"2026-10-17T10:05:44Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:4439","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-05T10:02:13Z","modified":"2026-10-17T10:06:45Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4440","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-05T10:02:14Z","modified":"2026-10-17T10:06:45Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4508","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-07T10:05:40Z","modified":"2026-10-17T10:06:46Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4538","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-07T10:05:44Z","modified":"2026-10-17T10:06:47Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4560","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-07T10:05:47Z","modified":"2026-10-17T10:06:48Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4568","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-07T10:05:49Z","modified":"2026-10-17T10:06:48Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4609","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-07T10:05:53Z","modified":"2026-10-17T10:06:50Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4624","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-07T10:05:54Z","modified":"2026-10-17T10:06:50Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7436","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-05-14T10:06:26Z","modified":"2026-10-17T10:07:05Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:8292","title":"Red Hat Security Advisory: mingw-freetype and spice-client-win security update","status":"published","published":"2025-05-29T10:03:34Z","modified":"2026-10-17T10:07:23Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9179","title":"Red Hat Security Advisory: libsoup security update","status":"published","published":"2025-06-18T10:05:01Z","modified":"2026-10-17T10:08:00Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:4560","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.\n\nSecurity Fix(es):\n\n* libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n\n* libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n\n* libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n\n* libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n\n* libsoup: Double free on  soup_message_headers_get_content_disposition() through  \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n\n* libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\n* libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421)\n\n* libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)\n\n* libsoup: Integer overflow in append_param_quoted [rhel-8.10.z] (CVE-2025-32050)\n\n* libsoup: Heap buffer overflow in sniff_unknown() [rhel-8.10.z] (CVE-2025-32052)\n\n* libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() [rhel-8.10.z] (CVE-2025-32053)\n\n* libsoup: Out of bounds reads in soup_headers_parse_request() [rhel-8.10.z] (CVE-2025-32906)\n\n* libsoup: Double free on  soup_message_headers_get_content_disposition() through  \"soup-message-headers.c\" via \"params\" GHashTable value [rhel-8.10.z] (CVE-2025-32911)\n\n* libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in Content-Disposition header [rhel-8.10.z] (CVE-2025-32913)\n\n* libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c [rhel-8.10.z] (CVE-2025-46420)\n\n* libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server [rhel-8.10.z] (CVE-2025-46421)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:59:56.128294Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:8292","title":"Important: mingw-freetype and spice-client-win security update","description":"MinGW Windows Freetype library.\n\nSecurity Fix(es):\n\n* freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n\n* libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n\n* libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n\n* libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n\n* libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n\n* libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with Range header (CVE-2025-32907)\n\n* libsoup: NULL Pointer Dereference on libsoup through  function \"sniff_mp4\" in soup-content-sniffer.c (CVE-2025-32909)\n\n* libsoup: Null pointer deference on libsoup via  /auth/soup-auth-digest.c through \"soup_auth_digest_authenticate\" on  client when server omits the \"realm\" parameter in an Unauthorized  response with Digest authentication (CVE-2025-32910)\n\n* libsoup: Double free on  soup_message_headers_get_content_disposition() through  \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n\n* libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:09.965894Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-32913","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T14:15:00Z","modified":"2026-04-22T15:41:54.256692Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"ALSA-2025:4560","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.  \n\nSecurity Fix(es):  \n\n  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n  * libsoup: Double free on soup_message_headers_get_content_disposition() through \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when \"filename\" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)\n  * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421)\n  * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-06T00:00:00Z","modified":"2026-10-29T11:02:23.12319889Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7436","title":"Important: libsoup security update","description":"The libsoup packages provide an HTTP client and server library for GNOME.  \n\nSecurity Fix(es):  \n\n  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)\n  * libsoup: Double free on soup_message_headers_get_content_disposition() through \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when \"filename\" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)\n  * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421)\n  * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:18.01878341Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:8292","title":"Important: mingw-freetype security update","description":"MinGW Windows Freetype library.  \n\nSecurity Fix(es):  \n\n  * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)\n  * libsoup: NULL Pointer Dereference on libsoup through function \"sniff_mp4\" in soup-content-sniffer.c (CVE-2025-32909)\n  * libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through \"soup_auth_digest_authenticate\" on client when server omits the \"realm\" parameter in an Unauthorized response with Digest authentication (CVE-2025-32910)\n  * libsoup: Double free on soup_message_headers_get_content_disposition() through \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when \"filename\" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-29T00:00:00Z","modified":"2026-10-29T11:02:23.207476897Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-60389","title":"CVE-2025-32913 affecting package libsoup for versions less than 3.0.4-3","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T14:15:24Z","modified":"2026-04-21T04:37:25.056382Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-60402","title":"CVE-2025-32913 affecting package libsoup for versions less than 3.4.4-4","description":"A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.","status":"published","published":"2025-04-14T14:15:24Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"CLSA-2025-1750784473","title":"libsoup: Fix of 2 CVEs","description":"- CVE-2025-32911: fix use-after-free vulnerability in\n  soup_message_headers_get_content_disposition() function\n- CVE-2025-32913: fix NULL pointer dereference in\n  soup_message_headers_get_content_disposition() function","status":"published","published":"2025-06-24T17:01:19Z","modified":"2026-06-01T00:30:53.527832249Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1752088985","title":"libsoup: Fix of 3 CVEs","description":"- CVE-2025-32906: fix out-of-bound read vulnerability\n- CVE-2025-32911: fix use-after-free vulnerability\n- CVE-2025-32913: fix NULL pointer dereference","status":"published","published":"2025-07-09T19:23:10Z","modified":"2026-06-01T00:33:26.158047816Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1752089185","title":"libsoup: Fix of 3 CVEs","description":"- CVE-2025-32906: fix out-of-bound read vulnerability\n- CVE-2025-32911: fix use-after-free vulnerability\n- CVE-2025-32913: fix NULL pointer dereference","status":"published","published":"2025-07-09T19:26:30Z","modified":"2026-06-01T00:33:27.473648234Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1752126372","title":"libsoup: Fix of 3 CVEs","description":"- CVE-2025-32906: fix out-of-bound read vulnerability\n- CVE-2025-32911: fix use-after-free vulnerability\n- CVE-2025-32913: fix NULL pointer dereference","status":"published","published":"2025-07-10T05:46:17Z","modified":"2026-06-01T00:33:17.95821713Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"DLA-4140-1","title":"libsoup2.4 - security update","status":"published","published":"2025-04-27T00:00:00Z","modified":"2026-03-09T01:22:57.502891Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0261","title":"Updated libsoup3 \u0026 libsoup packages fix security vulnerabilities","description":"Libsoup: heap buffer over-read in `skip_insignificant_space` when\nsniffing content. (CVE-2025-2784)\nLibsoup: denial of service attack to websocket server. (CVE-2025-32049)\nLibsoup: integer overflow in append_param_quoted. (CVE-2025-32050)\nLibsoup: segmentation fault when parsing malformed data uri.\n(CVE-2025-32051)\nLibsoup: heap buffer overflow in sniff_unknown(). (CVE-2025-32052)\nLibsoup: heap buffer overflows in sniff_feed_or_html() and\nskip_insignificant_space(). (CVE-2025-32053)\nLibsoup: out of bounds reads in soup_headers_parse_request().\n(CVE-2025-32906)\nLibsoup: denial of service in server when client requests a large amount\nof overlapping ranges with range header. (CVE-2025-32907)\nLibsoup: denial of service on libsoup through http/2 server.\n(CVE-2025-32908)\nLibsoup: null pointer dereference on libsoup through function\n\"sniff_mp4\" in soup-content-sniffer.c. (CVE-2025-32909)\nLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c\nthrough \"soup_auth_digest_authenticate\" on client when server omits the\n\"realm\" parameter in an unauthorized response with digest\nauthentication. (CVE-2025-32910)\nLibsoup: double free on soup_message_headers_get_content_disposition()\nthrough \"soup-message-headers.c\" via \"params\" ghashtable value.\n(CVE-2025-32911)\nLibsoup: null pointer dereference in client when server omits the\n\"nonce\" parameter in an unauthorized response with digest\nauthentication. (CVE-2025-32912)\nLibsoup: null pointer dereference in\nsoup_message_headers_get_content_disposition when \"filename\" parameter\nis present, but has no value in content-disposition header.\n(CVE-2025-32913)\nLibsoup: oob read on libsoup through function\n\"soup_multipart_new_from_message\" in soup-multipart.c leads to crash or\nexit of process. (CVE-2025-32914)\nLibsoup: memory leak on soup_header_parse_quality_list() via\nsoup-headers.c. (CVE-2025-46420)\nLibsoup: information disclosure may leads libsoup client sends\nauthorization header to a different host when being redirected by a\nserver. (CVE-2025-46421)\nLibsoup: null pointer dereference in libsoup may lead to denial of\nservice. (CVE-2025-4476)\nLibsoup: integer overflow in cookie expiration date handling in libsoup.\n(CVE-2025-4945)\n","status":"published","published":"2025-11-05T22:49:51Z","modified":"2026-04-16T04:41:13.813289008Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15189-1","title":"libsoup-2_4-1-2.74.3-11.1 on GA media","description":"These are all security issues fixed in the libsoup-2_4-1-2.74.3-11.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-06-01T00:00:00Z","modified":"2026-03-23T04:53:28.089089Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-32913","title":"CVE-2025-32913 in libsoup3 - Patched by Root","description":"Root has patched CVE-2025-32913 in the libsoup3 package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-11T06:48:05Z","modified":"2026-09-11T07:15:08.62588566Z","updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"SUSE-SU-2025:01504-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) \n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) \n - CVE-2025-32051: Fixed segmentation fault when parsing malformed data URI (bsc#1240754)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) \n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) \n - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222) \n - CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values of pseudo-headers (bsc#1241223)\n - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n - CVE-2025-32910: Fixed NULL pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params' (bsc#1241238)\n - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n - CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) \n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) \n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-05-29T13:33:46Z","modified":"2026-02-04T04:35:49.591263Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01794-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-02T09:04:15Z","modified":"2026-03-23T04:46:22.316679Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01801-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-02T23:45:00Z","modified":"2026-03-23T04:47:37.592639Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01802-1","title":"Security update for libsoup2","description":"This update for libsoup2 fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-03T01:15:16Z","modified":"2026-03-23T04:46:23.061783Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01864-1","title":"Security update for libsoup2","description":"This update for libsoup2 fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-10T14:05:01Z","modified":"2026-02-04T03:50:57.02117Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1504-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) \n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) \n - CVE-2025-32051: Fixed segmentation fault when parsing malformed data URI (bsc#1240754)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) \n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) \n - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222) \n - CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values of pseudo-headers (bsc#1241223)\n - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n - CVE-2025-32910: Fixed NULL pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params' (bsc#1241238)\n - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n - CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) \n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) \n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-05-07T12:06:15Z","modified":"2026-02-04T04:24:16.382423Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1510-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) \n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) \n - CVE-2025-32051: Fixed segmentation fault when parsing malformed data URI (bsc#1240754)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) \n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) \n - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222) \n - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n - CVE-2025-32910: Fixed NULL pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n - CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) \n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) \n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-05-07T14:38:16Z","modified":"2026-02-04T03:26:33.3954Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20375-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750)\n- CVE-2025-32050: Fixed Integer overflow in append_param_quoted (bsc#1240752)\n- CVE-2025-32051: Fixed Segmentation fault when parsing malformed data URI (bsc#1240754)\n- CVE-2025-32052: Fixed Heap buffer overflow in sniff_unknown() (bsc#1240756)\n- CVE-2025-32053: Fixed Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757)\n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n- CVE-2025-32914: Fixed out of bounds read  in `soup_multipart_new_from_message()` (bsc#1241164)\n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n- CVE-2025-32907: Fixed xcessive memory consumption in server when client requests a large amount of overlapping\n  ranges in a single HTTP request (bsc#1241222)\n- CVE-2025-32906: Fixed Out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n- CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values\n  of pseudo-headers (bsc#1241223)\n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n- CVE-2025-32911: Fixed Double free on soup_message_headers_get_content_disposition() via \"params\" (bsc#1241238)\n- CVE-2025-32910: Fixed null pointer deference on client when server omits the 'realm' parameter in an Unauthorized\n  response with Digest authentication (bsc#1241252)\n- CVE-2025-46420: Fixed Memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686)\n- CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688)\n","status":"published","published":"2025-05-29T09:19:43Z","modified":"2026-03-23T04:48:15.062624Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20446-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` \n  when sniffing content (bsc#1240750)\n- CVE-2025-32050:Fixed Integer overflow in append_param_quoted (bsc#1240752)\n- CVE-2025-32051:Fixed Segmentation fault when parsing malformed data URI (bsc#1240754)\n- CVE-2025-32052:Fixed Heap buffer overflow in sniff_unknown() (bsc#1240756)\n- CVE-2025-32053:Fixed Heap buffer overflows in sniff_feed_or_html() and\n  skip_insignificant_space() (bsc#1240757)\n- CVE-2025-32913:Fixed NULL pointer dereference in \n  soup_message_headers_get_content_disposition (bsc#1241162)\n- CVE-2025-32914:Fixed out of bounds read  in `soup_multipart_new_from_message()` (bsc#1241164)\n- CVE-2025-32912:Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n- CVE-2025-32907:Fixed excessive memory consumption in server when client requests\n  a large amount of overlapping ranges in a single HTTP request (bsc#1241222)\n- CVE-2025-32908:Fixed HTTP request leading to server crash due to HTTP/2 server not fully\n  validating the values of pseudo-headers (bsc#1241223)\n- CVE-2025-32909:Fixed NULL pointer dereference in the sniff_mp4 function in \n  soup-content-sniffer.c (bsc#1241226)\n- CVE-2025-32911:Fixed Double free on soup_message_headers_get_content_disposition() \n  via \"params\" (bsc#1241238)\n- CVE-2025-32910:Fixed null pointer deference on client when server omits the 'realm' \n  parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n- CVE-2025-32906:Fixed Out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n- CVE-2025-46420:Fixed Memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686)\n- CVE-2025-46421:Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-06-25T08:16:32Z","modified":"2026-03-23T04:50:09.231996Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7490-1","title":"libsoup2.4 vulnerabilities","description":"Tan Wei Chong discovered that libsoup incorrectly handled memory when\nparsing HTTP request headers. An attacker could possibly use this issue to\nsend a maliciously crafted HTTP request to the server, causing a denial of\nservice. (CVE-2025-32906)\n\nAlon Zahavi discovered that libsoup incorrectly parsed video files. An\nattacker could possibly use this issue to send a maliciously crafted HTTP\nresponse back to the client, causing a denial of service, or leading to\nundefined behavior. (CVE-2025-32909)\n\nJan Różański discovered that libsoup incorrectly handled memory when\nparsing authentication headers. An attacker could possibly use this issue\nto send a maliciously crafted HTTP response back to the client, causing a\ndenial of service. (CVE-2025-32910, CVE-2025-32912)\n\nIt was discovered that libsoup incorrectly handled data in the hash table\ndata type. An attacker could possibly use this issue to send a maliciously\ncrafted HTTP request to the server, causing a denial of service or remote\ncode execution. (CVE-2025-32911)\n\nJan Różański discovered that libsoup incorrectly handled memory when\nparsing the content disposition HTTP header. An attacker could possibly use\nthis issue to send maliciously crafted data to a client or server, causing\na denial of service. (CVE-2025-32913)\n\nAlon Zahavi discovered that libsoup incorrectly handled memory when parsing\nHTTP requests. An attacker could possibly use this issue to send a\nmaliciously crafted HTTP request to the server, causing a denial of service\nor obtaining sensitive information. (CVE-2025-32914)\n\nIt was discovered that libsoup incorrectly handled memory when parsing\nquality-list headers. An attacker could possibly use this issue to send a\nmaliciously crafted HTTP request to the server, causing a denial of\nservice. (CVE-2025-46420)\n\nJan Różański discovered that libsoup did not strip authorization\ninformation upon redirects. An attacker could possibly use this issue to\nobtain sensitive information. (CVE-2025-46421)\n","status":"published","published":"2025-05-06T13:12:38Z","modified":"2026-06-25T13:32:30.402347022Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7490-3","title":"libsoup3 vulnerabilities","description":"USN-7490-1 fixed vulnerabilities in libsoup2.4. This update provides the\ncorresponding updates for libsoup3.\n\nOriginal advisory details:\n\n Tan Wei Chong discovered that libsoup incorrectly handled memory when\n parsing HTTP request headers. An attacker could possibly use this issue to\n send a maliciously crafted HTTP request to the server, causing a denial of\n service. (CVE-2025-32906)\n \n Alon Zahavi discovered that libsoup incorrectly parsed video files. An\n attacker could possibly use this issue to send a maliciously crafted HTTP\n response back to the client, causing a denial of service, or leading to\n undefined behavior. (CVE-2025-32909)\n \n Jan Różański discovered that libsoup incorrectly handled memory when\n parsing authentication headers. An attacker could possibly use this issue\n to send a maliciously crafted HTTP response back to the client, causing a\n denial of service. (CVE-2025-32910, CVE-2025-32912)\n \n It was discovered that libsoup incorrectly handled data in the hash table\n data type. An attacker could possibly use this issue to send a maliciously\n crafted HTTP request to the server, causing a denial of service or remote\n code execution. (CVE-2025-32911)\n \n Jan Różański discovered that libsoup incorrectly handled memory when\n parsing the content disposition HTTP header. An attacker could possibly\n use this issue to send maliciously crafted data to a client or server,\n causing a denial of service. (CVE-2025-32913)\n \n Alon Zahavi discovered that libsoup incorrectly handled memory when\n parsing HTTP requests. An attacker could possibly use this issue to send a\n maliciously crafted HTTP request to the server, causing a denial of\n service or obtaining sensitive information. (CVE-2025-32914)\n \n It was discovered that libsoup incorrectly handled memory when parsing\n quality-list headers. An attacker could possibly use this issue to send a\n maliciously crafted HTTP request to the server, causing a denial of\n service. (CVE-2025-46420)\n \n Jan Różański discovered that libsoup did not strip authorization\n information upon redirects. An attacker could possibly use this issue to\n obtain sensitive information. (CVE-2025-46421)\n","status":"published","published":"2025-05-07T12:18:50Z","modified":"2026-04-27T17:56:40.460043Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}