gpp_maybe Security update for libsoup2

SUSE-SLE-Module-Basesystem-15-SP7-2025-1802

This update for libsoup2 fixes the following issues: - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) - CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via "params". (bsc#1241238) - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)

• Release Date
  Jun 3 2025
• References
  Bugzilla: 1241263, 1241226, 1243423, 1241162, 1241238, 1241214, 1241252, 1243332
  CVEs: CVE-2025-32911, CVE-2025-4948, CVE-2025-32910, CVE-2025-32913, CVE-2025-32912, CVE-2025-4969, CVE-2025-32909, CVE-2025-32906
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.9.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.9.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.9.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.9.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.9.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.9.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.9.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.9.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.9.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.9.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.9.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.9.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.9.1 lock rpm