Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-32914

Fixed in a distro release EPSS <1%CVSS 7.4

A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.

Published 2025-04-14 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 10libsoup33.6.5-3.el10_0
AlmaLinux 10libsoup3-devel3.6.5-3.el10_0
AlmaLinux 10libsoup3-doc3.6.5-3.el10_0
AlmaLinux 8libsoup2.62.3-9.el8_10
AlmaLinux 8libsoup-devel2.62.3-9.el8_10
AlmaLinux 9libsoup2.72.0-10.el9_6.2
AlmaLinux 9libsoup-devel2.72.0-10.el9_6.2
Debian 11libsoup2.42.72.0-2+deb11u2
Debian 12libsoup2.4no fix
Debian 12libsoup3no fix
Debian 13libsoup2.42.74.3-10.1
Debian 13libsoup33.6.5-2
Debian 14libsoup33.6.5-2
Red Hat Enterprise Linux 10.0libsoup30:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-debuginfo0:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-debugsource0:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-devel0:3.6.5-3.el10_0
Red Hat Enterprise Linux 10.0libsoup3-doc0:3.6.5-3.el10_0
Red Hat Enterprise Linux 8libsoup0:2.62.3-9.el8_10
Red Hat Enterprise Linux 8libsoup-debuginfo0:2.62.3-9.el8_10
Red Hat Enterprise Linux 8libsoup-debugsource0:2.62.3-9.el8_10
Red Hat Enterprise Linux 8libsoup-devel0:2.62.3-9.el8_10
Red Hat Enterprise Linux 9libsoup0:2.72.0-10.el9_6.2
Red Hat Enterprise Linux 9libsoup-debuginfo0:2.72.0-10.el9_6.2
Red Hat Enterprise Linux 9libsoup-debugsource0:2.72.0-10.el9_6.2
Red Hat Enterprise Linux 9libsoup-devel0:2.72.0-10.el9_6.2
Red Hat rhel aus 8.2libsoup0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.2libsoup-debuginfo0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.2libsoup-debugsource0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.2libsoup-devel0:2.62.3-1.el8_2.5
Red Hat rhel aus 8.4libsoup0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.4libsoup-debuginfo0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.4libsoup-debugsource0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.4libsoup-devel0:2.62.3-2.el8_4.5
Red Hat rhel aus 8.6libsoup0:2.62.3-2.el8_6.5
Red Hat rhel aus 8.6libsoup-debuginfo0:2.62.3-2.el8_6.5
Red Hat rhel aus 8.6libsoup-debugsource0:2.62.3-2.el8_6.5
Red Hat rhel aus 8.6libsoup-devel0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup-debuginfo0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup-debugsource0:2.62.3-2.el8_6.5
Red Hat rhel e4s 8.6libsoup-devel0:2.62.3-2.el8_6.5
Red Hat rhel e4s 9.0libsoup0:2.72.0-8.el9_0.5
Red Hat rhel e4s 9.0libsoup-debuginfo0:2.72.0-8.el9_0.5
Red Hat rhel e4s 9.0libsoup-debugsource0:2.72.0-8.el9_0.5
Red Hat rhel e4s 9.0libsoup-devel0:2.72.0-8.el9_0.5
Red Hat rhel els 7libsoup0:2.62.2-6.el7_9
Red Hat rhel els 7libsoup0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-debuginfo0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-debuginfo0:2.62.2-6.el7_9
Red Hat rhel els 7libsoup-devel0:2.62.2-6.el7_9
Red Hat rhel els 7libsoup-devel0:2.62.2-9.el7_9
Red Hat rhel eus 8.8libsoup0:2.62.3-3.el8_8.5
Red Hat rhel eus 8.8libsoup-debuginfo0:2.62.3-3.el8_8.5
Red Hat rhel eus 8.8libsoup-debugsource0:2.62.3-3.el8_8.5
Red Hat rhel eus 8.8libsoup-devel0:2.62.3-3.el8_8.5
Red Hat rhel eus 9.2libsoup0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.2libsoup-debuginfo0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.2libsoup-debugsource0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.2libsoup-devel0:2.72.0-8.el9_2.5
Red Hat rhel eus 9.4libsoup0:2.72.0-8.el9_4.5
Red Hat rhel eus 9.4libsoup-debuginfo0:2.72.0-8.el9_4.5
Red Hat rhel eus 9.4libsoup-debugsource0:2.72.0-8.el9_4.5
Red Hat rhel eus 9.4libsoup-devel0:2.72.0-8.el9_4.5
Red Hat rhel tus 8.6libsoup0:2.62.3-2.el8_6.5
Red Hat rhel tus 8.6libsoup-debuginfo0:2.62.3-2.el8_6.5
Red Hat rhel tus 8.6libsoup-debugsource0:2.62.3-2.el8_6.5
Red Hat rhel tus 8.6libsoup-devel0:2.62.3-2.el8_6.5
Rocky Linux 8libsoup0:2.62.3-9.el8_10
Rocky Linux 9libsoup0:2.72.0-10.el9_6.2
SUSE Enterprise Storage 7.1libsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSlibsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Micro 5.2libsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise Micro 5.3libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Micro 5.4libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Micro 5.5libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libsoup3.4.4-150600.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libsoup22.74.3-150600.4.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libsoup3.4.4-150600.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libsoup22.74.3-150600.4.6.1
SUSE Linux Enterprise Server 12 SP5-LTSSlibsoup2.62.2-5.12.1
SUSE Linux Enterprise Server 15 SP3-LTSSlibsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libsoup2.62.2-5.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3libsoup2.68.4-150200.4.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libsoup22.74.2-150400.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libsoup3.0.4-150400.3.7.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libsoup22.74.2-150400.3.6.1
SUSE Linux Micro 6.0libsoup3.4.2-6.1
SUSE Linux Micro 6.1libsoup3.4.4-slfo.1.1_3.1
SUSE Manager Proxy 4.3libsoup3.0.4-150400.3.7.1
SUSE Manager Proxy 4.3libsoup22.74.2-150400.3.6.1
SUSE Manager Server 4.3libsoup3.0.4-150400.3.7.1
SUSE Manager Server 4.3libsoup22.74.2-150400.3.6.1
Ubuntu 20.04 LTSlibsoup2.42.70.0-1ubuntu0.3
Ubuntu 22.04 LTSlibsoup2.42.74.2-3ubuntu0.6
Ubuntu 22.04 LTSlibsoup2.42.74.2-3ubuntu0.3
Ubuntu 24.04 LTSlibsoup2.42.74.3-6ubuntu1.3
Ubuntu 24.04 LTSlibsoup2.42.74.3-6ubuntu1.6
Ubuntu 24.04 LTSlibsoup33.4.4-5ubuntu0.5
Ubuntu 24.04 LTSlibsoup33.4.4-5ubuntu0.3
Ubuntu Pro 16.04 LTSlibsoup2.42.52.2-1ubuntu0.3+esm5
Ubuntu Pro 16.04 LTSlibsoup2.42.52.2-1ubuntu0.3+esm1
Ubuntu Pro 18.04 LTSlibsoup2.42.62.1-1ubuntu0.4+esm2
Ubuntu Pro 18.04 LTSlibsoup2.42.62.1-1ubuntu0.4+esm6
Ubuntu Pro 20.04 LTSlibsoup2.42.70.0-1ubuntu0.5+esm1
Ubuntu Pro 22.04 LTSlibsoup33.0.7-0ubuntu1+esm3
Ubuntu Pro 22.04 LTSlibsoup33.0.7-0ubuntu1+esm5
openSUSE Leap 15.6libsoup3.4.4-150600.3.7.1
openSUSE Leap 15.6libsoup22.74.3-150600.4.6.1
openSUSE Tumbleweedlibsoup3.6.5-2.1
openSUSE Tumbleweedlibsoup22.74.3-9.1