gpp_maybe Security update for libsoup

SUSE-SLE-Micro-6.0-368

This update for libsoup fixes the following issues: - CVE-2025-4476: Fixed null pointer dereference that may lead to denial of service (bsc#1243422) - CVE-2025-4948: Fixed Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup (bsc#1243332) - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) - CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling in libsoup (bsc#1243314)

• Release Date
  Jun 28 2025
• References
  Bugzilla: 528882, 553466, 1243314, 1243332, 1243422, 1243423
  CVEs: CVE-2025-4476, CVE-2025-4945, CVE-2025-4948, CVE-2025-4969
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64

• Packages
  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.2-8.1 lock rpm

SUSE Linux Micro 6.0 s390x

• Packages
  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.2-8.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.2-8.1 lock rpm