libsoup vulnerabilities

A flaw was found in libsoup where SoupWebsocketConnection may accept a large WebSocket message, causing excessive memory allocation and leading to a denial of service (DoS).

A heap buffer over-read vulnerability was found in the libsoup library during content sniffing via the skip_insight_whitespace() function. Clients using libsoup may read one byte out-of-bounds in response to a crafted HTTP response from an HTTP server.