Libsoup Vulnerable to Integer Overflow via Cookie Expiration Date Handling in Cookie Parsing Logic and Vulnerable to Information Exposure via Out-of-Bounds Read in HTTP Library Component

CVE-2025-4945 A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in...

SUSE SLED15: libsoup-3_0-0 / libsoup-3_0-0-32bit / libsoup-devel / etc (SUSE-SU-2026:0690-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0690-1 advisory. - CVE-2025-32049: denial of Service attack to websocket server bsc1240751. - CVE-2026-2369: buff...

SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:0689-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0689-1 advisory. - CVE-2025-32049: denial of Service attack to websocket server bsc1240751. - CVE-2026-2369: buffer overread due to integer underflo...

libsoup security update

2.62.2-2.0.11 - Fixes CVE-2026-0719 CVE-2026-1761 Orabug: 38958074 2.62.2-2.0.9 - Fix CVE-2025-14523 Orabug: 38873507 2.62.2-2.0.7 - Backport patch for CVE-2025-4945 and CVE-2025-11021 Orabug: 38664275 2.62.2-2.0.5 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 - CVE-2025-329...

TencentOS Server 4: libsoup (TSSA-2026:0095)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0095 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

libsoup-3_0-0-3.6.6-2.1 on GA media (moderate)

libsoup-30-0-3.6.6-2.1 on GA media Announcement ID: openSUSE-SU-2026:10276-1 Rating: moderate Cross-References: CVE-2026-1467 CVE-2026-1539 CVE-2026-1760 CVSS scores: CVE-2026-1467 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-1467 SUSE : 5.3...

OPENSUSE-SU-2026:10276-1 libsoup-3_0-0-3.6.6-2.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2026:0703-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read bsc1256418. - CVE-2025-4476: null pointer dereference may lead to denial of service bsc1243422. - CVE-2025-32049: denial of Service attack to websocket server bsc1240751. -...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-32049: denial of Service attack to websocket server bsc1240751. CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources bsc1258120. CVE-2026-2443: out-of-bounds read when processing specially crafted...

SUSE-SU-2026:0689-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server bsc1240751. - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources bsc1258120. - CVE-2026-2443: out-of-bounds read when processing specially...

Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.

Summary TSSC/IMC addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2025-14523 DESCRIPTION: A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common...

SUSE CVE-2026-3099

A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does not properly track issued nonces or enforce the required incrementing nonce-count nc attribute. This vulnerability allows a remote attacker to capture a single valid...

libsoup-2_4-1-2.74.3-17.1 on GA media (moderate)

libsoup-24-1-2.74.3-17.1 on GA media Announcement ID: openSUSE-SU-2026:10246-1 Rating: moderate Cross-References: CVE-2026-2708 CVSS scores: CVE-2026-2708 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N CVE-2026-2708 SUSE : 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA...

CVE-2026-1761 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1761 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1467 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1467 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1801 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1801 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1536 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1536 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2025-14523 affecting package libsoup for versions less than 3.4.4-12

CVE-2025-14523 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12

CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...