HCE3-SA-2025-0083 Important HCE 3.0 Security Fix(es): GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because _x27;\0_x27; characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. (CVE-2024-52530) GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this. (CVE-2024-52531) GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. (CVE-2024-52532) HCE 3.0 libsoup3-3.4.4-4.hce3.x86_64.rpm libsoup3-devel-3.4.4-4.hce3.x86_64.rpm libsoup3-3.4.4-4.hce3.aarch64.rpm libsoup3-devel-3.4.4-4.hce3.aarch64.rpm