RLSA-2024:9559

Описание

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

• libsoup: infinite loop while reading websocket data (CVE-2024-52532)

• libsoup: HTTP request smuggling via stripping null bytes from the ends of header names (CVE-2024-52530)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.