The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4560 advisory.

    [2.62.3-8]
    - Backport patches for various CVEs, plus test improvements       Resolves: RHEL-85887       Resolves: RHEL-85900       Resolves: RHEL-85901       Resolves: RHEL-87039       Resolves: RHEL-87094       Resolves: RHEL-87114       Resolves: RHEL-88348       Resolves: RHEL-88351

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4568 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

    * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host     when being redirected by a server (CVE-2025-46421)

    * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7436 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with     Range header (CVE-2025-32907)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

    * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host     when being redirected by a server (CVE-2025-46421)

    * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_8292 advisory.

    * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and     variable font files (CVE-2025-27363)

    * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with     Range header (CVE-2025-32907)

    * libsoup: NULL Pointer Dereference on libsoup through  function sniff_mp4 in soup-content-sniffer.c     (CVE-2025-32909)

    * libsoup: Null pointer deference on libsoup via  /auth/soup-auth-digest.c through     soup_auth_digest_authenticate on  client when server omits the realm parameter in an Unauthorized     response with Digest authentication (CVE-2025-32910)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_4560 advisory.

    * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)

    * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host     when being redirected by a server (CVE-2025-46421)

    * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c (CVE-2025-46420)

    * libsoup: Integer overflow in append_param_quoted [rhel-8.10.z] (CVE-2025-32050)

    * libsoup: Heap buffer overflow in sniff_unknown() [rhel-8.10.z] (CVE-2025-32052)

    * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() [rhel-8.10.z]     (CVE-2025-32053)

    * libsoup: Out of bounds reads in soup_headers_parse_request() [rhel-8.10.z] (CVE-2025-32906)

    * libsoup: Double free on  soup_message_headers_get_content_disposition() through  soup-message-     headers.c via params GHashTable value [rhel-8.10.z] (CVE-2025-32911)

    * libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when filename     parameter  is present, but has no value in Content-Disposition header [rhel-8.10.z] (CVE-2025-32913)

    * libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c [rhel-8.10.z]     (CVE-2025-46420)

    * libsoup: Information disclosure may leads libsoup client sends Authorization header to a different host     when being redirected by a server [rhel-8.10.z] (CVE-2025-46421)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
235370	Oracle Linux 8 : libsoup (ELSA-2025-4560)	Nessus	Oracle Linux Local Security Checks	5/6/2025	9/11/2025	critical
235380	RHEL 8 : libsoup (RHSA-2025:4568)	Nessus	Red Hat Local Security Checks	5/6/2025	6/5/2025	critical
237336	RHEL 9 : libsoup (RHSA-2025:7436)	Nessus	Red Hat Local Security Checks	5/27/2025	6/5/2025	critical
354511	Rocky Linux 8 [CIQ] Security Update: mingw32-freetype / mingw32-freetype-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_8292)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
357062	Rocky Linux 8 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (crlsa-2025_4560)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

high

critical