Explore top 10 tips to secure your open-source projects now. Read More
×
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-19143 http://linux.oracle.com/errata/ELSA-2026-19143.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsoup3-3.6.5-3.el10_2.11.x86_64.rpm libsoup3-devel-3.6.5-3.el10_2.11.x86_64.rpm libsoup3-doc-3.6.5-3.el10_2.11.noarch.rpm aarch64: libsoup3-3.6.5-3.el10_2.11.aarch64.rpm libsoup3-devel-3.6.5-3.el10_2.11.aarch64.rpm libsoup3-doc-3.6.5-3.el10_2.11.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsoup3-3.6.5-3.el10_2.11.src.rpm Related CVEs: CVE-2026-4271 CVE-2026-5119 Description of changes: [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs _______________________________________________ El-errata mailing list
Patch for CVE-2026-5119. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-37298d3095 2026-06-04 01:35:07.681028+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 43 Version : 3.6.6 Release : 3.fc43 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2026-5119 -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Luigi Pavan - 3.6.6-3 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-37298d3095' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Patch for CVE-2026-5119. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-37298d3095 2026-06-04 01:35:07.681028+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 43 Version : 3.6.6 Release : 3.fc43 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2026-5119 -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Luigi Pavan - 3.6.6-3 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-37298d3095' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Patch for CVE-2026-5119. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ce6cab40ac 2026-06-01 00:48:39.785049+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 44 Version : 3.6.6 Release : 8.fc44 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2026-5119 -------------------------------------------------------------------------------- ChangeLog: * Wed May 20 2026 Luigi Pavan - 3.6.6-8 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests * Mon Apr 27 2026 Michael Catanzaro - 3.6.6-7 - Tighten glib-networking dependency to Requires -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-ce6cab40ac' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-15968 http://linux.oracle.com/errata/ELSA-2026-15968.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsoup3-3.6.5-3.el10_1.11.x86_64.rpm libsoup3-devel-3.6.5-3.el10_1.11.x86_64.rpm libsoup3-doc-3.6.5-3.el10_1.11.noarch.rpm aarch64: libsoup3-3.6.5-3.el10_1.11.aarch64.rpm libsoup3-devel-3.6.5-3.el10_1.11.aarch64.rpm libsoup3-doc-3.6.5-3.el10_1.11.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsoup3-3.6.5-3.el10_1.11.src.rpm Related CVEs: CVE-2026-4271 CVE-2026-5119 Description of changes: [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs _______________________________________________ El-errata mailing list
Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-55dabf3975 2026-03-30 00:14:59.309220+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 44 Version : 3.6.6 Release : 6.fc44 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 19 2026 Milan Crha - 3.6.6-6 - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect) - Resolves: rhbz#2433867 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433867 - CVE-2026-1539 libsoup3: libsoup: Credential leakage via HTTP redirects [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433867 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2026-55dabf3975' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Important: libsoup3 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2410", "synopsis": "Important: libsoup3 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for libsoup3.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.\n\nSecurity Fix(es):\n\n* libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2435961", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2435961", "description": ""}], "cves": [{"name": "CVE-2026-1761", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-1761", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "cvss3BaseScore": "8.6", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-02-13T09:09:56.933620Z", "rpms": {"Rocky Linux 10": {"nvras": ["libsoup3-debugsource-0:3.6.5-3.el10_1.10.aarch64.rpm", "libsoup3-debugsource-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-doc-0:3.6.5-3.el10_1.10.noarch.rpm","libsoup3-debugsource-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-0:3.6.5-3.el10_1.10.src.rpm", "libsoup3-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.aarch64.rpm", "libsoup3-debugsource-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.aarch64.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-0:3.6.5-3.el10_1.10.aarch64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Libsoup3 on Rocky Linux 10 faces an important security update addressing a stack-based buffer overflow issue impacting functionality.. libsoup3 security update, important libsoup3 fix, Rocky Linux 10 buffer overflow, libsoup3 vulnerability. . Severity: Important. LinuxSecurity.com Team
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-2410 http://linux.oracle.com/errata/ELSA-2026-2410.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsoup3-3.6.5-3.el10_1.10.x86_64.rpm libsoup3-devel-3.6.5-3.el10_1.10.x86_64.rpm libsoup3-doc-3.6.5-3.el10_1.10.noarch.rpm aarch64: libsoup3-3.6.5-3.el10_1.10.aarch64.rpm libsoup3-devel-3.6.5-3.el10_1.10.aarch64.rpm libsoup3-doc-3.6.5-3.el10_1.10.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsoup3-3.6.5-3.el10_1.10.src.rpm Related CVEs: CVE-2026-1761 Description of changes: [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs _______________________________________________ El-errata mailing list
Get the latest Linux and open source security news straight to your inbox.