Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Fedora 43 libsoup3 Important Info Disclosure Patch CVE-2026-5119

fedora
Calendar Grey June 3, 2026
Dist Fedora Esm H88
Critical patch released for libsoup3 in Fedora to address CVE-2026-5119, which may expose HTTP cookies to risks.
Patch for CVE-2026-5119

Summary

Libsoup is an HTTP library implementation in C. It was originally part

of a SOAP (Simple Object Access Protocol) implementation called Soup, but

the SOAP and non-SOAP parts have now been split into separate packages.

libsoup uses the Glib main loop and is designed to work well with GTK

applications. This enables GNOME applications to access HTTP servers

on the network in a completely asynchronous fashion, very similar to

the Gtk+ programming model (a synchronous operation mode is also

supported for those who want it), but the SOAP parts were removed

long ago.

Update Information:

Patch for CVE-2026-5119

Topics%20covered

Topics Covered

security advisory fedora important information disclosure libsoup3 HTTP cookies

Change Log

* Tue May 19 2026 Luigi Pavan - 3.6.6-3 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests

References


[ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-37298d3095' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: libsoup3
Product: Fedora 43
Version: 3.6.6
Release: 3.fc43
URL: https://wiki.gnome.org/Projects/libsoup
Summary: Soup, an HTTP library implementation

Topics%20covered

Topics Covered

security advisory fedora important information disclosure libsoup3 HTTP cookies

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here