--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-42ee7772e3
2025-01-29 05:01:23.704920+00:00
--------------------------------------------------------------------------------

Name        : libsoup3
Product     : Fedora 41
Version     : 3.6.4
Release     : 1.fc41
URL         : https://wiki.gnome.org/Projects/libsoup
Summary     : Soup, an HTTP library implementation
Description :
Libsoup is an HTTP library implementation in C. It was originally part
of a SOAP (Simple Object Access Protocol) implementation called Soup, but
the SOAP and non-SOAP parts have now been split into separate packages.

libsoup uses the Glib main loop and is designed to work well with GTK
applications. This enables GNOME applications to access HTTP servers
on the network in a completely asynchronous fashion, very similar to
the Gtk+ programming model (a synchronous operation mode is also
supported for those who want it), but the SOAP parts were removed
long ago.

--------------------------------------------------------------------------------
Update Information:

Fix for CVE-2024-52531
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 20 2025 nmontero  - 3.6.4-1
- Update to 3.6.4
* Mon Jan 20 2025 Fedora Release Engineering  - 3.6.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jan 17 2025 Fedora Release Engineering  - 3.6.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Mon Jan 13 2025 nmontero  - 3.6.3-1
- Update to 3.6.3
* Mon Nov 25 2024 nmontero  - 3.6.1-1
- Update to 3.6.1
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2342285 - CVE-2024-52531 libsoup3: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=2342285
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-42ee7772e3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue

Fedora 41: libsoup3 2025-42ee7772e3 Security Advisory Updates

January 29, 2025
Fix for CVE-2024-52531

Summary

Libsoup is an HTTP library implementation in C. It was originally part

of a SOAP (Simple Object Access Protocol) implementation called Soup, but

the SOAP and non-SOAP parts have now been split into separate packages.

libsoup uses the Glib main loop and is designed to work well with GTK

applications. This enables GNOME applications to access HTTP servers

on the network in a completely asynchronous fashion, very similar to

the Gtk+ programming model (a synchronous operation mode is also

supported for those who want it), but the SOAP parts were removed

long ago.

Update Information:

Fix for CVE-2024-52531

Change Log

* Mon Jan 20 2025 nmontero - 3.6.4-1 - Update to 3.6.4 * Mon Jan 20 2025 Fedora Release Engineering - 3.6.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Fri Jan 17 2025 Fedora Release Engineering - 3.6.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Jan 13 2025 nmontero - 3.6.3-1 - Update to 3.6.3 * Mon Nov 25 2024 nmontero - 3.6.1-1 - Update to 3.6.1

References

[ 1 ] Bug #2342285 - CVE-2024-52531 libsoup3: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2342285

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-42ee7772e3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
Name : libsoup3
Product : Fedora 41
Version : 3.6.4
Release : 1.fc41
URL : https://wiki.gnome.org/Projects/libsoup
Summary : Soup, an HTTP library implementation

Related News