REDHAT-BUG-2361963: Medium severity libsoup vulnerability
Published Apr 24, 2025
·Updated
libsoup prior to version 3.6.3 is vulnerable to a memory leak in the soupheaderparsequalitylist() function when parsing a quality list if any element contains all zeroes, i.e. q=0.0 , q=0.00 , q=0.000, and so forth.
Affected Software
1 affected component
Gnome libsoup<3.6.3
Event History
Apr 24, 2025
Data Sourced
via Red Hat·01:38 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2361963?
The severity of REDHAT-BUG-2361963 is classified as moderate due to the memory leak vulnerability.
2
How do I fix REDHAT-BUG-2361963?
To fix REDHAT-BUG-2361963, upgrade libsoup to version 3.6.3 or later.
3
Which versions of libsoup are affected by REDHAT-BUG-2361963?
Libsoup versions prior to 3.6.3 are affected by REDHAT-BUG-2361963.
4
What causes the memory leak in REDHAT-BUG-2361963?
The memory leak in REDHAT-BUG-2361963 is caused by the soup_header_parse_quality_list() function when parsing a quality list with elements containing all zeroes.
5
Is there a workaround for REDHAT-BUG-2361963?
Currently, there is no documented workaround for REDHAT-BUG-2361963 other than upgrading to the fixed version.