Bug 2359346

Summary: CVE-2025-32906 mingw-libsoup: Out of bounds reads in soup_headers_parse_request() [fedora-all]
Product: [Fedora] Fedora Reporter: Patrick Del Bello <pdelbell>
Component: mingw-libsoupAssignee: Kalev Lember <kalevlember>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: high    
Version: 41CC: elima, kalevlember, manisandro, marcandre.lureau, rjones
Target Milestone: ---Keywords: Security, SecurityTracking
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: {"flaws": ["fa15ab8e-7775-463a-9994-db07a62cfd78"]}
Fixed In Version: mingw-libsoup-2.74.3-11.fc41 mingw-libsoup-2.74.3-11.fc40 mingw-libsoup-2.74.3-11.fc42 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-04-25 01:48:09 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2359341    

Description Patrick Del Bello 2025-04-14 01:44:23 UTC
More information about this security flaw is available in the following bug:

https://bugzilla.redhat.com/show_bug.cgi?id=2359341

Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Comment 1 Fedora Update System 2025-04-15 18:06:15 UTC
FEDORA-2025-df1ce151e4 (mingw-libsoup-2.74.3-10.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-df1ce151e4

Comment 2 Fedora Update System 2025-04-15 18:06:31 UTC
FEDORA-2025-8d023de6cb (mingw-libsoup-2.74.3-10.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-8d023de6cb

Comment 3 Fedora Update System 2025-04-16 01:04:08 UTC
FEDORA-2025-4d3d9c564d has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-4d3d9c564d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-4d3d9c564d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2025-04-16 01:48:24 UTC
FEDORA-2025-df1ce151e4 has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-df1ce151e4`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-df1ce151e4

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2025-04-16 02:02:45 UTC
FEDORA-2025-8d023de6cb has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-8d023de6cb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-8d023de6cb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2025-04-17 21:03:01 UTC
FEDORA-2025-c4605302b8 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-c4605302b8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-c4605302b8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-04-17 21:47:44 UTC
FEDORA-2025-bd12d23d21 has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-bd12d23d21`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-bd12d23d21

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2025-04-17 21:59:49 UTC
FEDORA-2025-67e824b908 has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-67e824b908`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-67e824b908

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2025-04-25 01:48:09 UTC
FEDORA-2025-bd12d23d21 (mingw-libsoup-2.74.3-11.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Fedora Update System 2025-04-25 01:59:21 UTC
FEDORA-2025-67e824b908 (mingw-libsoup-2.74.3-11.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2025-04-25 02:11:41 UTC
FEDORA-2025-c4605302b8 (mingw-libsoup-2.74.3-11.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.