Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the soupmultipartinputstreamreadheaders function when processing multipart payloads with an oversized boundary string. An attacker can cause the application to crash or potentially access unauthorized memory...

ROS-20260626-73-0002

The vulnerability of the library that accesses HTTP servers via LibSoup is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to gain access to confidential data or cause service failures...

RHSA-2026:22716 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2026:22316 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHEL 9 : libsoup (RHSA-2026:21686)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:21686 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Information disclosure via cleartext...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libsoup (UTSA-2026-015475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015475 advisory. A flaw was found in libsoups WebSocket frame processing when handling incoming messages. If a non- default configuration is used where the maximum incoming payload...

OESA-2026-2029 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw was found in libsoup. When establishing HTTPS tunnels through a configur...

CLSA-2026-1776763201 libsoup: Fix of 2 CVEs

CVE-2026-1467: validate URI host characters when checking if a URI is valid - CVE-2026-1539: fix proxy credentials leak on cross-origin HTTP redirect...

The vulnerability of the soup_filter_input_stream_read_line() function in the LibSoup library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the soupfilterinputstreamreadline function in the LibSoup library related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the LibSoup library for HTTP servers relates to reading data beyond the allowed buffer limits, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the LibSoup library for HTTP servers relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the md4sum() function in the NTLM component of the access library for HTTP servers allows a hacker to cause a service failure.

The vulnerability of the md4sum function in the NTLM component of the HTTP server access library LibSoup is related to the escape of an operation beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the LibSoup library for HTTP servers relates to the possibility of accessing memory after it is freed, allowing a attacker to cause a service failure.

The vulnerability of the HTTP server-based LibSoup library lies in its ability to exploit memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the libsoup library, related to deficiencies in HTTP request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the libsoup library is related to deficiencies in handling http requests. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests HTTP Request Smuggling attack...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the soupmessagenew function. An attacker can manipulate HTTP headers and request data by supplying specially crafted input containing CRLF sequences. Remediation A fix was pushed into the master branch but not yet...

Libsoup Vulnerable to Integer Overflow via Cookie Expiration Date Handling in Cookie Parsing Logic and Vulnerable to Information Exposure via Out-of-Bounds Read in HTTP Library Component

CVE-2025-4945 A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in...

[SECURITY] Fedora 43 Update: mingw-libsoup-2.74.3-17.fc43

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

UBUNTU-CVE-2026-2443

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server...

Alibaba Cloud Linux 3 : 0037: spice-client-win (ALINUX3-SA-2026:0037)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0037 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-14523: A flaw in libsoups HTTP...

Security Bulletin: Vulnerabilities in libsoup library (CVE-2025-4945, CVE-2025-11021) affect Power HMC.

Summary The libsoup library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-4945 DESCRIPTION: A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...