p PatchFirst

ALSA-2024:9573

ALSA-2024:9573 · Important: libsoup security update

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: infinite loop while reading websocket data (CVE-2024-52532) * libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • libsoup AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 2.62.3-6.el8_10

    Actualiza a 2.62.3-6.el8_10

  • libsoup-devel AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 2.62.3-6.el8_10

    Actualiza a 2.62.3-6.el8_10

Fuentes originales

Comprueba tu servidor →