Important Photon OS Security Update - PHSA-2025-5.0-0614

Updates of 'libsoup' packages of Photon OS have been released...

Libsoup: improper handling of http vary header in libsoup caching

...

PT-2025-36392

openSUSE Advisory: libsoup vulnerability CVE-2025-03091 patched. Severity: LOW. Impact: Local DoS. Action: Run sudo zypper update. Read more: 👉 https://t.co/JNYgziZl5i https://t.co/pM5GPVIlzo...

CVE-2025-4969 affecting package libsoup for versions less than 3.4.4-9

CVE-2025-4969 affecting package libsoup for versions less than 3.4.4-9. A patched version of the package is available...

SUSE-SU-2025:03091-1 Security update for libsoup2

This update for libsoup2 fixes the following issues: - CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling in libsoup bsc1243314...

Important Photon OS Security Update - PHSA-2025-4.0-0865

Updates of 'libsoup' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2025-9901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup's caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that...

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

...

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

...

Libsoup: denial of service attack to websocket server

...

Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465

...

SUSE CVE-2025-9901

A flaw was found in libsoup's caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

Libsoup: cookie domain validation bypass via uppercase characters in libsoup

...

CVE-2025-9901

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

AZL-67058 CVE-2025-9901 affecting package libsoup 3.4.4-16

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

DEBIAN-CVE-2025-9901

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

AZL-67061 CVE-2025-9901 affecting package libsoup 3.0.4-12

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

CVE-2025-9901

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

UBUNTU-CVE-2025-9901

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

CVE-2025-9901 Libsoup: improper handling of http vary header in libsoup caching

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...