HCE2-SA-2025-0095 Important HCE 2.0 Security Fix(es): GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because _x27;\0_x27; characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. (CVE-2024-52530) GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. (CVE-2024-52532) GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this. (CVE-2024-52531) HCE 2.0 libsoup-2.74.2-1.r2.hce2.aarch64.rpm libsoup-devel-2.74.2-1.r2.hce2.aarch64.rpm libsoup-help-2.74.2-1.r2.hce2.noarch.rpm libsoup-2.74.2-1.r2.hce2.x86_64.rpm libsoup-devel-2.74.2-1.r2.hce2.x86_64.rpm