Nixpkgs security tracker
5.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes silent omission of requested byte ranges from HTTP 206 Partial Content responses on resources larger than approximately 2 GB.
References
Affected products
Matching in nixpkgs
pkgs.podman
Program for managing pods, containers and container images
pkgs.libsoup_3
HTTP client/server library for GNOME
pkgs.podman-tui
Podman Terminal UI
pkgs.libsoup_2_4
None
pkgs.gnome-clocks
Simple and elegant clock application for GNOME
pkgs.podman-bootc
Streamlining podman+bootc interactions
pkgs.cockpit-podman
Cockpit UI for podman containers
pkgs.podman-compose
Implementation of docker-compose with podman backend
pkgs.podman-desktop
Graphical tool for developing on containers and Kubernetes
pkgs.nomad-driver-podman
Podman task driver for Nomad
pkgs.python313Packages.podman
Python bindings for Podman's RESTful API
Package maintainers
-
@lucasew Lucas Eduardo Wendt <lucas59356@gmail.com>
-
@alexandru0-dev Alexandru Nechita <alexandru.italia32+nixpkgs@gmail.com>
-
@andre4ik3 andre4ik3 <andre4ik3@fastmail.com>
-
@theCapypara Marco Köpcke <hello@capypara.de>
-
@nekowinston winston <hey@winston.sh>
-
@thunze Tom Hunze
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>
-
@bobby285271 Bobby Rong <rjl931189261@126.com>
-
@cpcloud Phillip Cloud
-
@saschagrunert Sascha Grunert <mail@saschagrunert.de>
-
@vdemeester Vincent Demeester <vincent@sbr.pm>
-
@evan-goode Evan Goode <mail@evangoo.de>
-
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
-
@booxter Ihar Hrachyshka <ihar.hrachyshka@gmail.com>
-
@aaronjheng Aaron Jheng <wentworth@outlook.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>