{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-1467: validate the URI host, including an IPv6 zone ID, when a\n message is created or its URI is set; SoupServer answers an invalid request\n host with 400\n- CVE-2026-3632: CR/LF in the URI host can no longer reach the Host header\n (CVE-2026-1467 host validation)\n- CVE-2026-3633: reject an HTTP method that is not an RFC 9110 token; SoupServer\n answers one with 400\n- CVE-2026-66339: do not send Proxy-Authorization on a connection that does not\n go via the proxy (inside a CONNECT tunnel, direct)\n- CVE-2026-1539: strip Proxy-Authorization on a cross-origin redirect, including\n credentials negotiated through a 407\n- CVE-2026-12547: use cached proxy credentials only for the proxy they came from\n- CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest,\n with a bounded nonce table and stale=TRUE renewal", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791531781.json" } ], "tracking": { "current_release_date": "2026-10-09T07:45:29Z", "generator": { "date": "2026-10-09T07:45:29Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791531781", "initial_release_date": "2026-10-09T07:45:29Z", "revision_history": [ { "date": "2026-10-09T07:45:29Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "libsoup: Fix of 15 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "product": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "product_id": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup-devel@2.72.0-16.el9_8.3.tuxcare.els3?arch=x86_64" } } }, { "category": "product_version", "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "product": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "product_id": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup@2.72.0-16.el9_8.3.tuxcare.els3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "product": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "product_id": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup-devel@2.72.0-16.el9_8.3.tuxcare.els3?arch=i686" } } }, { "category": "product_version", "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "product": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "product_id": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup@2.72.0-16.el9_8.3.tuxcare.els3?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "product": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "product_id": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup-devel@2.72.0-16.el9_8.3.tuxcare.els3?arch=aarch64" } } }, { "category": "product_version", "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "product": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "product_id": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup@2.72.0-16.el9_8.3.tuxcare.els3?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "product": { "name": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "product_id": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libsoup-doc@2.72.0-16.el9_8.3.tuxcare.els3?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64" }, "product_reference": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686" }, "product_reference": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64" }, "product_reference": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64" }, "product_reference": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64" }, "product_reference": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686" }, "product_reference": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" }, "product_reference": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64" }, "product_reference": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686" }, "product_reference": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64" }, "product_reference": "libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64" }, "product_reference": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64" }, "product_reference": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686" }, "product_reference": "libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" }, "product_reference": "libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-3633", "cwe": { "id": "CWE-93", "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF (Carriage Return Line Feed) injection, occurs because the method value is not properly escaped during request line construction, potentially leading to HTTP request injection.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3633" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-3633", "url": "https://access.redhat.com/security/cve/CVE-2026-3633" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2445128", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445128" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/484", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/484" } ], "release_date": "2026-03-17T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-3099", "cwe": { "id": "CWE-323", "name": "Reusing a Nonce, Key Pair in Encryption" }, "notes": [ { "category": "description", "text": "A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does not properly track issued nonces or enforce the required incrementing nonce-count (nc) attribute. This vulnerability allows a remote attacker to capture a single valid authentication header and replay it repeatedly. Consequently, the attacker can bypass authentication and gain unauthorized access to protected resources, impersonating the legitimate user.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3099" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-3099", "url": "https://access.redhat.com/security/cve/CVE-2026-3099" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2442232", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442232" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/495", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/495" } ], "release_date": "2026-03-12T14:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-1801", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_line() logic, where libsoup accepts malformed chunk headers, such as lone line feed (LF) characters instead of the required carriage return and line feed (CRLF). A remote attacker can exploit this without authentication or user interaction by sending specially crafted chunked requests. This allows libsoup to parse and process multiple HTTP requests from a single network message, potentially leading to information disclosure.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-1801" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-1801", "url": "https://access.redhat.com/security/cve/CVE-2026-1801" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2436315", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436315" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/481", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/481" } ], "release_date": "2026-02-03T21:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-66338", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-66338" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-66338", "url": "https://access.redhat.com/security/cve/CVE-2026-66338" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2506950", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506950" } ], "release_date": "2026-07-24T23:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-12549", "cwe": { "id": "CWE-805", "name": "Buffer Access with Incorrect Length Value" }, "notes": [ { "category": "description", "text": "The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading to malformed HTTP 206 responses and log flooding.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12549" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-12549", "url": "https://access.redhat.com/security/cve/CVE-2026-12549" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/cve-2026-0716", "url": "https://access.redhat.com/security/cve/cve-2026-0716" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2489999", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489999" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/work_items/516", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/work_items/516" } ], "release_date": "2026-06-22T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-2708", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')" }, "notes": [ { "category": "description", "text": "A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2708" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-2708", "url": "https://access.redhat.com/security/cve/CVE-2026-2708" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2440743", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440743" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/500", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/500" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/513", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/513" } ], "release_date": "2026-04-23T22:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-1467", "cwe": { "id": "CWE-93", "name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit this by providing a specially crafted URL containing CRLF sequences, allowing them to inject additional HTTP headers or complete HTTP request bodies. This can lead to unintended or unauthorized HTTP requests being forwarded by the proxy, potentially impacting downstream services.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-1467" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-1467", "url": "https://access.redhat.com/security/cve/CVE-2026-1467" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2433174", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433174" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/488", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/488" } ], "release_date": "2026-01-27T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-66339", "cwe": { "id": "CWE-201", "name": "Insertion of Sensitive Information Into Sent Data" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-66339" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-66339", "url": "https://access.redhat.com/security/cve/CVE-2026-66339" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2506951", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506951" } ], "release_date": "2026-07-24T23:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-1539", "cwe": { "id": "CWE-201", "name": "Insertion of Sensitive Information Into Sent Data" }, "notes": [ { "category": "description", "text": "A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-1539" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-1539", "url": "https://access.redhat.com/security/cve/CVE-2026-1539" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/489", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/489" } ], "release_date": "2026-01-28T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-4945", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior, allowing an attacker to bypass cookie expiration logic, causing persistent or unintended cookie behavior. The issue stems from improper validation of large integer inputs during date arithmetic operations within the cookie parsing routines.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4945" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19713", "url": "https://access.redhat.com/errata/RHSA-2025:19713" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19714", "url": "https://access.redhat.com/errata/RHSA-2025:19714" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19720", "url": "https://access.redhat.com/errata/RHSA-2025:19720" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20959", "url": "https://access.redhat.com/errata/RHSA-2025:20959" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21032", "url": "https://access.redhat.com/errata/RHSA-2025:21032" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21655", "url": "https://access.redhat.com/errata/RHSA-2025:21655" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21656", "url": "https://access.redhat.com/errata/RHSA-2025:21656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21657", "url": "https://access.redhat.com/errata/RHSA-2025:21657" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21664", "url": "https://access.redhat.com/errata/RHSA-2025:21664" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21665", "url": "https://access.redhat.com/errata/RHSA-2025:21665" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21666", "url": "https://access.redhat.com/errata/RHSA-2025:21666" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21772", "url": "https://access.redhat.com/errata/RHSA-2025:21772" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22013", "url": "https://access.redhat.com/errata/RHSA-2025:22013" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-4945", "url": "https://access.redhat.com/security/cve/CVE-2025-4945" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2367175", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2367175" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/448", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/448" } ], "release_date": "2025-05-19T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2026-12548", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12548" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-12548", "url": "https://access.redhat.com/security/cve/CVE-2026-12548" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2489996", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489996" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/work_items/512", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/work_items/512" } ], "release_date": "2026-07-21T19:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-2443", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2443" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-2443", "url": "https://access.redhat.com/security/cve/CVE-2026-2443" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2439671", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439671" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/487", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/487" } ], "release_date": "2026-02-13T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-3632", "cwe": { "id": "CWE-1286", "name": "Improper Validation of Syntactic Correctness of Input" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup, a library used by applications to send network requests. This vulnerability occurs because libsoup does not properly validate hostnames, allowing special characters to be injected into HTTP headers. A remote attacker could exploit this to perform HTTP smuggling, where they can send hidden, malicious requests alongside legitimate ones. In certain situations, this could lead to Server-Side Request Forgery (SSRF), enabling an attacker to force the server to make unauthorized requests to other internal or external systems. The impact is low, as SoupServer is not actually used in internet infrastructure.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3632" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-3632", "url": "https://access.redhat.com/security/cve/CVE-2026-3632" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2445127", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445127" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/483", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/483" } ], "release_date": "2026-03-17T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-66337", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client application to crash or disclose sensitive heap memory.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-66337" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-66337", "url": "https://access.redhat.com/security/cve/CVE-2026-66337" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2506949", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506949" } ], "release_date": "2026-07-24T23:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-11021", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11021" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:18183", "url": "https://access.redhat.com/errata/RHSA-2025:18183" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19713", "url": "https://access.redhat.com/errata/RHSA-2025:19713" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:19714", "url": "https://access.redhat.com/errata/RHSA-2025:19714" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:20959", "url": "https://access.redhat.com/errata/RHSA-2025:20959" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21032", "url": "https://access.redhat.com/errata/RHSA-2025:21032" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21655", "url": "https://access.redhat.com/errata/RHSA-2025:21655" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21656", "url": "https://access.redhat.com/errata/RHSA-2025:21656" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21657", "url": "https://access.redhat.com/errata/RHSA-2025:21657" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21664", "url": "https://access.redhat.com/errata/RHSA-2025:21664" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21665", "url": "https://access.redhat.com/errata/RHSA-2025:21665" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21666", "url": "https://access.redhat.com/errata/RHSA-2025:21666" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:21772", "url": "https://access.redhat.com/errata/RHSA-2025:21772" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22013", "url": "https://access.redhat.com/errata/RHSA-2025:22013" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-11021", "url": "https://access.redhat.com/security/cve/CVE-2025-11021" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2399627", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2399627" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/459", "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/459" } ], "release_date": "2025-09-26T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:43:02.387456Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781", "product_ids": [ "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "AlmaLinux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "AlmaLinux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.aarch64", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.i686", "Rocky Linux-9.8:libsoup-devel-0:2.72.0-16.el9_8.3.tuxcare.els3.x86_64", "Rocky Linux-9.8:libsoup-doc-0:2.72.0-16.el9_8.3.tuxcare.els3.noarch" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531781" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }