Security Bulletin: A vulnerability in libsoup affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libsoup. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-12910 DESCRIPTION: An unspecified error in getcookies function in soup-cookie-jar.c in libsoup has an unknown impact via an empty hostname. CVSS Base Score:...

EulerOS Virtualization for ARM 64 3.0.1.0 : libsoup (EulerOS-SA-2019-1392)

According to the versions of the libsoup package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The getcookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empt...

openSUSE: Security Advisory for libsoup (openSUSE-SU-2019:1310-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libsoup (openSUSE-2019-1310)

This update for libsoup fixes the following issues : Security issue fixed : - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

OPENSUSE-SU-2019:1310-1 Security update for libsoup

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libsoup (moderate)

openSUSE Security Update: Security update for libsoup Announcement ID: openSUSE-SU-2019:1310-1 Rating: moderate References: 1100097 Cross-References: CVE-2018-12910 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libsoup...

[SECURITY] Fedora 30 Update: libsoup-2.66.1-2.fc30

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

EulerOS 2.0 SP5 : libsoup (EulerOS-SA-2019-1143)

According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Tenable Network Security has extracted the preceding description...

Photon OS 2.0: Libsoup PHSA-2018-2.0-0060

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0060. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libsoup PHSA-2018-1.0-0182

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0182. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libsoup PHSA-2018-1.0-0149

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0149. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libsoup PHSA-2018-2.0-0091

An update of the libsoup package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0091. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the get_cookies function in the HTTP library libsoup, which allows a hacker to execute arbitrary code.

The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...

CentOS Update for gdm CESA-2018:3140 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the `oup_body_input_stream_read_chunked` function in the `libsoup` library of the GNOME graphical interface for Linux operating systems allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the oupbodyinputstreamreadchunked function in the libsoup/libsoup-body-input-stream.c file, a library for GNOME’s graphical interface in Linux operating systems, arises due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute...

SUSE SLES12 Security Update : libsoup (SUSE-SU-2018:2204-2)

This update for libsoup fixes the following issues : Security issue fixed : CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers bsc1052916. Bug fixes: bsc1086036:...

SUSE-SU-2018:2204-2 Security update for libsoup

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers bsc1052916. Bug fixes: - bsc1086036:...

Fedora 28 : libsoup (2018-fb2afee474)

This update backports an upstream fix for CVE-2018-12910. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

EulerOS 2.0 SP2 : libsoup (EulerOS-SA-2018-1419)

According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Tenable Network Security has extracted the preceding description...

EulerOS 2.0 SP3 : libsoup (EulerOS-SA-2018-1391)

According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Tenable Network Security has extracted the preceding description...