Red Hat Security Advisory: libsoup3 security update

Fixed packages 5

Vulnerabilities 6

• High 7.5
  CVE-2025-32906

  Libsoup: out of bounds reads in soup_headers_parse_request()

  A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Apr 14, 2025
• High 7.5
  CVE-2025-32908

  Libsoup: denial of service on libsoup through http/2 server

  A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service (DoS).

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Apr 14, 2025
• High 7.4
  CVE-2025-32914

  Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

  A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Apr 14, 2025
• High 7.0
  CVE-2025-2784

  Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

  A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Apr 3, 2025
• Medium 6.8
  CVE-2025-46421

  Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

  A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Apr 24, 2025
• Medium 6.5
  CVE-2025-32912

  Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

  A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Apr 14, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2354669
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359341
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359343
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2359358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2361962
• article
  https://issues.redhat.com/browse/RHEL-65395
• article
  https://issues.redhat.com/browse/RHEL-84737
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7505.json
• report
  https://access.redhat.com/security/cve/CVE-2025-2784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-2784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-2784
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/422
• report
  https://access.redhat.com/security/cve/CVE-2025-32906
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32906
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32906
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/404
• report
  https://access.redhat.com/security/cve/CVE-2025-32908
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32908
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32908
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/429
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/451
• report
  https://access.redhat.com/security/cve/CVE-2025-32912
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32912
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32912
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/434
• report
  https://access.redhat.com/security/cve/CVE-2025-32914
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32914
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32914
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/436
• report
  https://access.redhat.com/security/cve/CVE-2025-46421
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46421
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46421
• article
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/439