Summary
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.
Security Fix(es):
* libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content (CVE-2025-2784)
* libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)
* libsoup: Denial of service on libsoup through HTTP/2 server (CVE-2025-32908)
* libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authentication (CVE-2025-32912)
* libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process (CVE-2025-32914)
* libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host when being redirected by a server (CVE-2025-46421)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | libsoup3 | 3.6.5-3.el10_0 |
| AlmaLinux · 10 | libsoup3-devel | 3.6.5-3.el10_0 |
| AlmaLinux · 10 | libsoup3-doc | 3.6.5-3.el10_0 |
Vulnerabilities 6
-
High 7.5
Libsoup: out of bounds reads in soup_headers_parse_request()
A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.
-
High 7.5
Libsoup: denial of service on libsoup through http/2 server
A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service (DoS).
-
High 7.4
Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
-
High 7.0
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
-
Medium 6.8
Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued …
-
Medium 6.5
Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication
A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.
References
-
report
https://access.redhat.com/security/cve/CVE-2025-2784
-
report
https://access.redhat.com/security/cve/CVE-2025-32906
-
report
https://access.redhat.com/security/cve/CVE-2025-32908
-
report
https://access.redhat.com/security/cve/CVE-2025-32912
-
report
https://access.redhat.com/security/cve/CVE-2025-32914
-
report
https://access.redhat.com/security/cve/CVE-2025-46421
-
report
https://bugzilla.redhat.com/2354669
-
report
https://bugzilla.redhat.com/2359341
-
report
https://bugzilla.redhat.com/2359343
-
report
https://bugzilla.redhat.com/2359356
-
report
https://bugzilla.redhat.com/2359358
-
report
https://bugzilla.redhat.com/2361962
-
advisory
https://errata.almalinux.org/10/ALSA-2025-7505.html