| Package | Affected versions | Patched versions |
|---|---|---|
| libsoup | < 3.6.5 | 3.6.5 |
| codeready linux builder | = 10.0 | |
| codeready linux builder for arm64 | = 10.0_aarch64 | |
| codeready linux builder for arm64 eus | = 10.0_aarch64 | |
| codeready linux builder for ibm z systems | = 10.0_s390x | |
| codeready linux builder for ibm z systems eus | = 10.0_s390x | |
| codeready linux builder for power little endian | = 10.0_ppc64le | |
| codeready linux builder for power little endian eus | = 10.0_ppc64le |
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free