Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-2784

Fixed in a distro release EPSS <1%CVSS 7.0

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Published 2025-04-03 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 10libsoup33.6.5-3.el10_0
AlmaLinux 10libsoup3-devel3.6.5-3.el10_0
AlmaLinux 10libsoup3-doc3.6.5-3.el10_0
AlmaLinux 8libsoup2.62.3-9.el8_10
AlmaLinux 8libsoup-devel2.62.3-9.el8_10
AlmaLinux 9libsoup2.72.0-10.el9_6.2
AlmaLinux 9libsoup-devel2.72.0-10.el9_6.2
Amazon Linux 2libsoup2.56.0-6.amzn2.0.2
Amazon Linux 2libsoup-devel2.56.0-6.amzn2.0.2
Amazon Linux 2023libsoup2.72.0-6.amzn2023.0.4
Amazon Linux 2023libsoup-devel2.72.0-6.amzn2023.0.4
Amazon Linux 2023libsoup-doc2.72.0-6.amzn2023.0.4
Amazon Linux 2023libsoup33.6.5-47.amzn2023
Amazon Linux 2023libsoup3-devel3.6.5-47.amzn2023
Amazon Linux 2023libsoup3-doc3.6.5-47.amzn2023
Debian 11libsoup2.42.72.0-2+deb11u2
Debian 12libsoup2.4no fix
Debian 12libsoup33.2.3-0+deb12u1
Debian 13libsoup2.42.74.3-10
Debian 13libsoup33.6.5-1
Debian 14libsoup33.6.5-1
Red Hat Enterprise Linux 10.0libsoup30:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-debuginfo0:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-debugsource0:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-devel0:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-doc0:3.6.5-3.el10_0
Red Hat Enterprise Linux 8libsoup0:2.62.3-9.el8_10
Red Hat Enterprise Linux 8libsoup-debuginfo0:2.62.3-9.el8_10
Red Hat Enterprise Linux 8libsoup-debugsource0:2.62.3-9.el8_10
Red Hat Enterprise Linux 8libsoup-devel0:2.62.3-9.el8_10
Red Hat Enterprise Linux 9libsoup0:2.72.0-10.el9_6.2
Red Hat Enterprise Linux 9libsoup-debuginfo0:2.72.0-10.el9_6.2
Red Hat Enterprise Linux 9libsoup-debugsource0:2.72.0-10.el9_6.2
Red Hat Enterprise Linux 9libsoup-devel0:2.72.0-10.el9_6.2
Red Hat rhel aus 8.2libsoup0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.2libsoup-debuginfo0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.2libsoup-debugsource0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.2libsoup-devel0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.4libsoup0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.4libsoup-debuginfo0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.4libsoup-debugsource0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.4libsoup-devel0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.6libsoup0:2.62.3-2.el8_6.5
Red Hat rhel aus 8.6libsoup-debuginfo0:2.62.3-2.el8_6.5
Red Hat rhel aus 8.6libsoup-debugsource0:2.62.3-2.el8_6.5
Red Hat rhel aus 8.6libsoup-devel0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup-debuginfo0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup-debugsource0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup-devel0:2.62.3-2.el8_6.5
Red Hat rhel e4s 9.0libsoup0:2.72.0-8.el9_0.5
Red Hat rhel e4s 9.0libsoup-debuginfo0:2.72.0-8.el9_0.5
Red Hat rhel e4s 9.0libsoup-debugsource0:2.72.0-8.el9_0.5
Red Hat rhel e4s 9.0libsoup-devel0:2.72.0-8.el9_0.5
Red Hat rhel els 7libsoup0:2.62.2-6.el7_9
Red Hat rhel els 7libsoup0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-debuginfo0:2.62.2-6.el7_9
Red Hat rhel els 7libsoup-debuginfo0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-devel0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-devel0:2.62.2-6.el7_9
Red Hat rhel eus 8.8libsoup0:2.62.3-3.el8_8.5
Red Hat rhel eus 8.8libsoup-debuginfo0:2.62.3-3.el8_8.5
Red Hat rhel eus 8.8libsoup-debugsource0:2.62.3-3.el8_8.5
Red Hat rhel eus 8.8libsoup-devel0:2.62.3-3.el8_8.5
Red Hat rhel eus 9.2libsoup0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.2libsoup-debuginfo0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.2libsoup-debugsource0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.2libsoup-devel0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.4libsoup0:2.72.0-8.el9_4.5
Red Hat rhel eus 9.4libsoup-debuginfo0:2.72.0-8.el9_4.5
Red Hat rhel eus 9.4libsoup-debugsource0:2.72.0-8.el9_4.5
Red Hat rhel eus 9.4libsoup-devel0:2.72.0-8.el9_4.5
Red Hat rhel tus 8.6libsoup0:2.62.3-2.el8_6.5
Red Hat rhel tus 8.6libsoup-debuginfo0:2.62.3-2.el8_6.5
Red Hat rhel tus 8.6libsoup-debugsource0:2.62.3-2.el8_6.5
Red Hat rhel tus 8.6libsoup-devel0:2.62.3-2.el8_6.5
Rocky Linux 8libsoup0:2.62.3-9.el8_10
Rocky Linux 9libsoup0:2.72.0-10.el9_6.2
SUSE Enterprise Storage 7.1libsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSlibsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Micro 5.2libsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise Micro 5.3libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Micro 5.4libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Micro 5.5libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libsoup3.4.4-150600.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libsoup22.74.3-150600.4.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libsoup3.4.4-150600.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libsoup22.74.3-150600.4.6.1
SUSE Linux Enterprise Server 12 SP5-LTSSlibsoup2.62.2-5.12.1
SUSE Linux Enterprise Server 15 SP3-LTSSlibsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libsoup2.62.2-5.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3libsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libsoup22.74.2-150400.3.6.1
SUSE Linux Micro 6.0libsoup3.4.2-6.1
SUSE Linux Micro 6.1libsoup3.4.4-slfo.1.1_3.1
SUSE Manager Proxy 4.3libsoup3.0.4-150400.3.7.1
SUSE Manager Proxy 4.3libsoup22.74.2-150400.3.6.1
SUSE Manager Server 4.3libsoup3.0.4-150400.3.7.1
SUSE Manager Server 4.3libsoup22.74.2-150400.3.6.1
Ubuntu 20.04 LTSlibsoup2.42.70.0-1ubuntu0.2
Ubuntu 22.04 LTSlibsoup2.42.74.2-3ubuntu0.2
Ubuntu 24.04 LTSlibsoup2.42.74.3-6ubuntu1.2
Ubuntu 24.04 LTSlibsoup33.4.4-5ubuntu0.2
Ubuntu Pro 16.04 LTSlibsoup2.42.52.2-1ubuntu0.3+esm4
Ubuntu Pro 18.04 LTSlibsoup2.42.62.1-1ubuntu0.4+esm5
Ubuntu Pro 22.04 LTSlibsoup33.0.7-0ubuntu1+esm2
openSUSE Leap 15.6libsoup3.4.4-150600.3.7.1
openSUSE Leap 15.6libsoup22.74.3-150600.4.6.1
openSUSE Tumbleweedlibsoup22.74.3-8.1