gpp_maybe Security update for libsoup

SUSE-SLE-Module-Basesystem-15-SP6-2024-4355

This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292) - CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287) Other fixes: - websocket-test: disconnect error copy after the test ends (glgo#GNOME/libsoup#391). - fix an intermittent test failure (glgo#GNOME/soup#399).

• Release Date
  Dec 17 2024
• References
  Bugzilla: 1233287, 1233285, 1233292
  CVEs: CVE-2024-52532, CVE-2024-52530, CVE-2024-52531
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.6 aarch64

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.3.1 lock rpm

Basesystem Module 15.6 ppc64le

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.3.1 lock rpm

Basesystem Module 15.6 s390x

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.3.1 lock rpm

Basesystem Module 15.6 x86_64

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.3.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.3.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.3.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.3.1 lock rpm