First published: Wed May 07 2025(Updated: )
Important: libsoup security update
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Enterprise Linux Server | ||
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions | ||
Red Hat Enterprise Linux for SAP Solutions | ||
Red Hat Enterprise Linux Server | ||
redhat/libsoup | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-debuginfo | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-debuginfo | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-debugsource | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-debugsource | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-devel | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-devel | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-debuginfo | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-debugsource | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
redhat/libsoup-devel | <2.62.3-2.el8_6.4 | 2.62.3-2.el8_6.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RHSA-2025:4624 is classified as important due to out of bounds reads and double free vulnerabilities in libsoup.
To fix RHSA-2025:4624, update the libsoup package to version 2.62.3-2.el8_6.4.
Red Hat Enterprise Linux Server and its variants including SAP Solutions are affected by RHSA-2025:4624.
The vulnerability in RHSA-2025:4624 affects the libsoup HTTP client and server library.
RHSA-2025:4624 addresses out of bounds reads in soup_headers_parse_request() and a double free vulnerability in soup_message_headers_get_content.