Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libsoup@2.62.2-9?arch=el7_9
purl pkg:rpm/redhat/libsoup@2.62.2-9?arch=el7_9
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (9)
Vulnerability Summary Fixed by
VCID-24tr-cene-gfch
Aliases:
CVE-2025-32911
libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value There are no reported fixed by versions.
VCID-6skx-v6sg-53gq
Aliases:
CVE-2025-2784
libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content There are no reported fixed by versions.
VCID-7hhg-3u9v-nqfw
Aliases:
CVE-2025-4945
libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup There are no reported fixed by versions.
VCID-jj7w-5tgz-4kcr
Aliases:
CVE-2025-32049
libsoup: Denial of Service attack to websocket server There are no reported fixed by versions.
VCID-ku6w-4wsv-qbe4
Aliases:
CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request() There are no reported fixed by versions.
VCID-rd74-1427-eybf
Aliases:
CVE-2025-4948
libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup There are no reported fixed by versions.
VCID-tpky-j79x-pqd4
Aliases:
CVE-2025-11021
libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library There are no reported fixed by versions.
VCID-yx68-81fu-ffar
Aliases:
CVE-2025-32914
libsoup: OOB Read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process There are no reported fixed by versions.
VCID-zhp7-2ks9-m7es
Aliases:
CVE-2025-32913
libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:41:39.928235+00:00 RedHat Importer Affected by VCID-6skx-v6sg-53gq https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-2784.json 38.0.0
2026-04-01T13:41:24.783288+00:00 RedHat Importer Affected by VCID-jj7w-5tgz-4kcr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32049.json 38.0.0
2026-04-01T13:40:56.956684+00:00 RedHat Importer Affected by VCID-yx68-81fu-ffar https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32914.json 38.0.0
2026-04-01T13:40:56.476094+00:00 RedHat Importer Affected by VCID-zhp7-2ks9-m7es https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32913.json 38.0.0
2026-04-01T13:40:56.084840+00:00 RedHat Importer Affected by VCID-24tr-cene-gfch https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32911.json 38.0.0
2026-04-01T13:40:55.484444+00:00 RedHat Importer Affected by VCID-ku6w-4wsv-qbe4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-32906.json 38.0.0
2026-04-01T13:40:07.015080+00:00 RedHat Importer Affected by VCID-rd74-1427-eybf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4948.json 38.0.0
2026-04-01T13:40:06.582946+00:00 RedHat Importer Affected by VCID-7hhg-3u9v-nqfw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4945.json 38.0.0
2026-04-01T13:36:25.507585+00:00 RedHat Importer Affected by VCID-tpky-j79x-pqd4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-11021.json 38.0.0