libsoup-2.72.0-8.el9_5.3

エラータID: AXSA:2025-9612:01

Release date: 
Friday, January 31, 2025 - 10:28
Subject: 
libsoup-2.72.0-8.el9_5.3
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

* libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (CVE-2024-52531)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.

Solution: 

Update packages.

CVEs: 
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this.
Additional Info: 

N/A

Download: 

SRPMS
  1. libsoup-2.72.0-8.el9_5.3.src.rpm
    MD5: 54921cf14b9ba8eb4fa51b63482f05a3
    SHA-256: 41be020ab934435944d0159936cee5461d92444401f4965ea971281bd25edac5
    Size: 1.43 MB

Asianux Server 9 for x86_64
  1. libsoup-2.72.0-8.el9_5.3.i686.rpm
    MD5: 9be4480fa1e7713c6cf1374f740e6c2e
    SHA-256: c8b081a9c86e551812b851515fbf179b56947738d9991a11118eb1f5973ee512
    Size: 426.84 kB
  2. libsoup-2.72.0-8.el9_5.3.x86_64.rpm
    MD5: 76bf1b2fa1e9dc6d1bdb29a1251f5a1a
    SHA-256: 1ba42968b27b02c483670b34ce413b4d06fee951683028e405d09d62a75ef9e3
    Size: 405.34 kB
  3. libsoup-devel-2.72.0-8.el9_5.3.i686.rpm
    MD5: 4534b2e742371993f6f939bf892e0486
    SHA-256: a7b860b9a2eeb3eda7b3698810f36063db012ef8bf6eb71fe2c6628dd04fbabf
    Size: 179.69 kB
  4. libsoup-devel-2.72.0-8.el9_5.3.x86_64.rpm
    MD5: 187d3b29d8e5a42863315639ef135476
    SHA-256: f4731ad76d40bba1bd82ab21d426e4138bd2e75898231e170064ecbb5bcb9bbb
    Size: 179.70 kB