ROOT-OS-DEBIAN-13-CVE-2025-11021 CVE-2025-11021 in libsoup3 - Patched by Root

Root has patched CVE-2025-11021 in the libsoup3 package for Root:Debian:13. Multiple fixed versions available...

NewStart CGSL MAIN 7.02 : libsoup3 Vulnerability (NS-SA-2026-0089)

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup3 packages installed that are affected by a vulnerability: - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing...

Oracle Linux 7 : libsoup (ELSA-2026-24722)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-24722 advisory. - Backport fix for CVE-2026-5119 Orabug: 39527088 - Fixes CVE-2026-0719 CVE-2026-1761 Orabug: 38958074 - Fix CVE-2025-14523 Orabug: 38873507 - Backport patch f...

libsoup security update

2.62.2-2.0.13 - Backport fix for CVE-2026-5119 Orabug: 39527088 2.62.2-2.0.11 - Fixes CVE-2026-0719 CVE-2026-1761 Orabug: 38958074 2.62.2-2.0.9 - Fix CVE-2025-14523 Orabug: 38873507 2.62.2-2.0.7 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 2.62.2-2.0.5 - Fixes...

Oracle Linux 7 : libsoup (ELSA-2026-2628)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2628 advisory. - Fixes CVE-2026-0719 CVE-2026-1761 Orabug: 38958074 - Fix CVE-2025-14523 Orabug: 38873507 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug...

CVE-2025-11021

creationtimestamp| type| source ---|---|--- 2026-02-12 07:22:46+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3menhhijmeo2w 2026-06-29 22:59:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphlomnj3a25...

libsoup security update

2.62.2-2.0.9 - Fix CVE-2025-14523 Orabug: 38873507 2.62.2-2.0.7 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 2.62.2-2.0.5 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 - CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 2.62.2-2.0.3 - Fixe...

Oracle Linux 7 : libsoup (ELSA-2026-0925)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0925 advisory. - Fix CVE-2025-14523 Orabug: 38873507 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049...

SUSE: Security Advisory (SUSE-SU-2026:20212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for libsoup (important)

openSUSE security update: security update for libsoup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20142-1 Rating: important References: bsc1250562 bsc1256399 bsc1256418 Cross-References: CVE-2025-11021 CVE-2026-0716 CVE-2026-0719 CVSS scores:...

OPENSUSE-SU-2026:20142-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution bsc1256399. - CVE-2026-0716:...

MiracleLinux 7 : libsoup-2.62.2-2.0.5.0.2.el7.AXS7 (AXSA:2025-11537:17)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11537:17 advisory. CVE-2025-4945: fix integer overflow vulnerability in date/time parsing CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...

MiracleLinux 8 : libsoup-2.62.3-10.el8_10 (AXSA:2025-11046:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11046:14 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsou...

libsoup security update

2.72.0-12.3 - Fix patch for CVE-2025-14523 to handle comparison case-insensitively 2.72.0-12.2 - Backport patch for CVE-2025-14523 2.72.0-12.1 - Backport patch for CVE-2025-4945 and CVE-2025-11021...

Fedora: Security Advisory (FEDORA-2025-5a82449616)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-6c78aad721)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : mingw-libsoup (2025-6c78aad721)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6c78aad721 advisory. Backport fix for CVE-2025-11021. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Oracle Linux 7 : libsoup (ELSA-2025-21657)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21657 advisory. - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 -...

libsoup security update

2.62.2-2.0.7 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 2.62.2-2.0.5 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 - CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 2.62.2-2.0.3 - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversi...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2025-1288)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1288 advisory. A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafte...