Red Hat libsoup Security Update (RHSA-2025:4440) Fixing 9 CVEs including RCE and Info Disclosure

Key Information Vulnerability Overview Advisory ID: RHSA-2025:4440 Type/Severity: Important Security Update Subject: libsoup Security Update Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64 Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64 Red Hat Enterprise Linux Server for SAP HANA LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux Server for SAP HANA LE - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Fixed Vulnerabilities CVE-2025-32050: Integer overflow in append_param_quoted CVE-2025-32052: Heap buffer overflow in sniff_unknown() CVE-2025-32053: Heap buffer overflows in snift_feed_or_html() and skip_insignificant_space() CVE-2025-32906: Out of bounds reads in soup_headers_parse_request() CVE-2025-32907: Denial of service in server when client requests a large amount of overlapping ranges with Range header CVE-2025-32911: Double free on soup_message_headers_get_content_disposition() through "soups-message-headers.c" via "params" GHashTable value CVE-2025-32913: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header CVE-2025-46421: Information disclosure may lead libsoup client to send Authorization header to a different host when being redirected by a server CVE-2025-46420: Memory leak on soup_header_parse_quality_list() via soup-headers.c Solution Refer to Red Hat Article for detailed steps to apply this update. References Red Hat Security Update Classification Contact Information Red Hat Security Contact Email: secalert@redhat.com More Contact Options: Red Hat Security Team Contact Page

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat libsoup Security Update (RHSA-2025:4440) Fixing 9 CVEs including RCE and Info Disclosure

More from this source