Summary
[2.62.2-2.0.1]
- Fixed CVE-2024-52530 for smuggling nullbytes in header names [Orabug: 37289659]
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libsoup | 0:2.62.2-2.0.1.el7 |
| Oracle Linux · 7 | libsoup-devel | 0:2.62.2-2.0.1.el7 |
Vulnerabilities 1
-
High 7.5
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of h…