High DLA-3992-1 3 CVEs

libsoup2.4 - security update

Published Dec 12, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	libsoup2.4	2.72.0-2+deb11u1

Vulnerabilities 3

High 7.5

CVE-2024-52530

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of h…

libsoup3 libsoup3 libsoup2.4 libsoup2.4 Debian Ubuntu Azure Linux

Nov 11, 2024
High 7.5

CVE-2024-52532

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebS…

libsoup3 libsoup3 libsoup2.4 libsoup Debian Ubuntu Azure Linux

Nov 11, 2024
Medium 6.5

CVE-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_par…

GNOME libsoup libsoup3 libsoup3 Debian Ubuntu Azure Linux

Nov 11, 2024