Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
383be9d5 by Salvatore Bonaccorso at 2025-04-18T15:24:51+02:00
Update status for CVE-2025-32908
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2451,9 +2451,10 @@ CVE-2025-32909 (A flaw was found in libsoup.
SoupContentSniffer may be vulnerabl
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/libsoup/-/commit/ba4c3a6f988beff59e45801ab36067293d24ce92
(3.6.2)
CVE-2025-32908 (A flaw was found in libsoup. The HTTP/2 server in libsoup may
not full ...)
- libsoup3 <unfixed> (bug #1103265)
- - libsoup2.4 <unfixed>
+ - libsoup2.4 <not-affected> (Vulnerable code not present)
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/issues/429
NOTE: https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/451
+ NOTE: Introduced after:
https://gitlab.gnome.org/GNOME/libsoup/-/commit/5fb25e7810498170dd3458c9509035cef945e299
(3.1.2)
CVE-2025-32907 (A flaw was found in libsoup. The implementation of HTTP range
requests ...)
- libsoup3 <unfixed> (bug #1103264)
- libsoup2.4 <unfixed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/383be9d5035d4151e872ddd9b055c5f9372a5c6c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/383be9d5035d4151e872ddd9b055c5f9372a5c6c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
