gpp_maybe Security update for libsoup2

SUSE-SLE-Module-Basesystem-15-SP5-2024-4349

This update for libsoup2 fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292) - CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287)

• Release Date
  Dec 17 2024
• References
  Bugzilla: 1233292, 1233285, 1233287
  CVEs: CVE-2024-52531, CVE-2024-52532, CVE-2024-52530
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 aarch64

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.2-150400.3.3.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.2-150400.3.3.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.2-150400.3.3.1 lock rpm

Basesystem Module 15.5 ppc64le

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.2-150400.3.3.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.2-150400.3.3.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.2-150400.3.3.1 lock rpm

Basesystem Module 15.5 s390x

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.2-150400.3.3.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.2-150400.3.3.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.2-150400.3.3.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.2-150400.3.3.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.2-150400.3.3.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.2-150400.3.3.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.2-150400.3.3.1 lock rpm