gpp_maybe Security update for libsoup

SUSE-SLE-Module-Basesystem-15-SP5-2024-4352

This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292) - CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287) Other fixes: - websocket-test: disconnect error copy after the test ends (glgo#GNOME/libsoup#391). - fix an intermittent test failure (glgo#GNOME/soup#399). - Increase test timeout on s390x. The http2-body-stream test can be slow and sometimes times out in our builds.

• Release Date
  Dec 17 2024
• References
  Bugzilla: 1233292, 1233285, 1233287
  CVEs: CVE-2024-52530, CVE-2024-52532, CVE-2024-52531
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 aarch64

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.0.4-150400.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.0.4-150400.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.0.4-150400.3.3.1 lock rpm

Basesystem Module 15.5 ppc64le

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.0.4-150400.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.0.4-150400.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.0.4-150400.3.3.1 lock rpm

Basesystem Module 15.5 s390x

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.0.4-150400.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.0.4-150400.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.0.4-150400.3.3.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.0.4-150400.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.0.4-150400.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.0.4-150400.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.0.4-150400.3.3.1 lock rpm