Bug 2359361

Summary: CVE-2025-32909 mingw-libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c [fedora-all]
Product: [Fedora] Fedora Reporter: Patrick Del Bello <pdelbell>
Component: mingw-libsoupAssignee: Kalev Lember <kalevlember>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 41CC: elima, kalevlember, manisandro, marcandre.lureau, rjones
Target Milestone: ---Keywords: Security, SecurityTracking
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: {"flaws": ["6b6633ad-e5e1-468b-8b0d-16c87a0ff3c2"]}
Fixed In Version: mingw-libsoup-2.74.3-11.fc41 mingw-libsoup-2.74.3-11.fc40 mingw-libsoup-2.74.3-11.fc42 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-04-25 01:48:18 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2359353    

Description Patrick Del Bello 2025-04-14 02:10:55 UTC
More information about this security flaw is available in the following bug:

https://bugzilla.redhat.com/show_bug.cgi?id=2359353

Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Comment 1 Fedora Update System 2025-04-15 18:06:21 UTC
FEDORA-2025-df1ce151e4 (mingw-libsoup-2.74.3-10.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-df1ce151e4

Comment 2 Fedora Update System 2025-04-15 18:06:38 UTC
FEDORA-2025-8d023de6cb (mingw-libsoup-2.74.3-10.fc41) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-8d023de6cb

Comment 3 Fedora Update System 2025-04-16 01:04:13 UTC
FEDORA-2025-4d3d9c564d has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-4d3d9c564d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-4d3d9c564d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2025-04-16 01:48:29 UTC
FEDORA-2025-df1ce151e4 has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-df1ce151e4`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-df1ce151e4

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2025-04-16 02:02:50 UTC
FEDORA-2025-8d023de6cb has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-8d023de6cb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-8d023de6cb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2025-04-17 21:03:06 UTC
FEDORA-2025-c4605302b8 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-c4605302b8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-c4605302b8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-04-17 21:47:49 UTC
FEDORA-2025-bd12d23d21 has been pushed to the Fedora 41 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-bd12d23d21`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-bd12d23d21

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2025-04-17 21:59:54 UTC
FEDORA-2025-67e824b908 has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-67e824b908`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-67e824b908

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2025-04-25 01:48:18 UTC
FEDORA-2025-bd12d23d21 (mingw-libsoup-2.74.3-11.fc41) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Fedora Update System 2025-04-25 01:59:26 UTC
FEDORA-2025-67e824b908 (mingw-libsoup-2.74.3-11.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2025-04-25 02:11:47 UTC
FEDORA-2025-c4605302b8 (mingw-libsoup-2.74.3-11.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.