Linux · Security advisory · January 30, 2025

ALSA-2025:0838: Security update for 2 packages

ALSA-2025:0838, released January 30, 2025, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0068
52nd percentile

Fixed package versions

ProductReleaseFixed in
libsoupalmalinux 82.62.3-7.el8_10
libsoup-develalmalinux 82.62.3-7.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-52531 gir1.2-soup-2.4: GNOME libsoup before 3.6.1 allows a buffer overflow in applications thatperform conversion to UTF-8 in soup_header_pa... 9.0 0.0068 None reported
Showing 1 to 1 of 1 1