The libsoup library used in Red Hat Enterprise Linux 8 contains several vulnerabilities: CVE-2025-2784 is a heap buffer over-read in the skip_insignificant_space function when sniffing content; CVE-2025-32049 allows denial of service attacks against the websocket server; CVE-2025-32914 is an out-of-bounds read in soup_multipart_new_from_message causing crashes or process exit; and CVE-2025-4948 is an integer underflow in the same function leading to denial of service. These vulnerabilities have been fixed in updated libsoup packages provided by Red Hat.

Successful exploitation of these vulnerabilities could lead to denial of service conditions or application crashes in software using libsoup. The heap buffer over-read and out-of-bounds read issues may cause process instability or termination. The websocket server denial of service vulnerability could disrupt network communications relying on websockets. The integer underflow also leads to denial of service. No known exploits in the wild have been reported.

Red Hat has released updated libsoup packages for Red Hat Enterprise Linux 8 to address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2025:8132 and the referenced article https://access.redhat.com/articles/11258. Applying this official patch mitigates the identified security issues. No additional vendor-recommended mitigations are currently indicated.