Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 15 articles for you...
217

Oracle Linux 10 libsoup3 Moderate Security Fix ELSA-2026-19143

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-19143 http://linux.oracle.com/errata/ELSA-2026-19143.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsoup3-3.6.5-3.el10_2.11.x86_64.rpm libsoup3-devel-3.6.5-3.el10_2.11.x86_64.rpm libsoup3-doc-3.6.5-3.el10_2.11.noarch.rpm aarch64: libsoup3-3.6.5-3.el10_2.11.aarch64.rpm libsoup3-devel-3.6.5-3.el10_2.11.aarch64.rpm libsoup3-doc-3.6.5-3.el10_2.11.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsoup3-3.6.5-3.el10_2.11.src.rpm Related CVEs: CVE-2026-4271 CVE-2026-5119 Description of changes: [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Explore Oracle Linux 10's security advisory for libsoup3 addressing moderate threats and remedies for recent vulnerabilities.. Oracle Linux, libsoup3, security advisory, update, moderate threat. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 17, 2026 moderate Oracle
89

Fedora 43 libsoup3 Critical Information Disclosure CVE-2026-5119

Patch for CVE-2026-5119. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-37298d3095 2026-06-04 01:35:07.681028+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 43 Version : 3.6.6 Release : 3.fc43 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2026-5119 -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Luigi Pavan - 3.6.6-3 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-37298d3095' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Patch for CVE-2026-5119 in Fedora 43's libsoup3 addresses critical information leakage issue during HTTPS transmission.. libsoup3 security patch, Fedora libraries update, HTTPS security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 04, 2026 Critical Fedora
89

Fedora 43 libsoup3 Important Info Disclosure Patch CVE-2026-5119

Patch for CVE-2026-5119. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-37298d3095 2026-06-04 01:35:07.681028+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 43 Version : 3.6.6 Release : 3.fc43 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2026-5119 -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Luigi Pavan - 3.6.6-3 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-37298d3095' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical patch released for libsoup3 in Fedora to address CVE-2026-5119, which may expose HTTP cookies to risks.. libsoup3 security patch, Fedora advisory, HTTP cookie transmission, CVE-2026-5119. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 03, 2026 Important Fedora
89

Fedora 44 libsoup3 Critical Info Disclosure Patch CVE-2026-5119

Patch for CVE-2026-5119. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ce6cab40ac 2026-06-01 00:48:39.785049+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 44 Version : 3.6.6 Release : 8.fc44 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2026-5119 -------------------------------------------------------------------------------- ChangeLog: * Wed May 20 2026 Luigi Pavan - 3.6.6-8 - Fix CVE-2026-5119: cookies sent in cleartext to HTTP proxy for HTTPS requests * Mon Apr 27 2026 Michael Catanzaro - 3.6.6-7 - Tighten glib-networking dependency to Requires -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452935 - CVE-2026-5119 libsoup3: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2452935 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2026-ce6cab40ac' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Critical patch for libsoup3 on Fedora 44 addresses information disclosure through HTTPS cookie transmission. Learn more!. libsoup3 security patch, Fedora update, information disclosure fix, HTTPS security, cookie transmission issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 01, 2026 Critical Fedora
217

Oracle Linux 10 libsoup3 Moderate Threat ELSA-2026-15968

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-15968 http://linux.oracle.com/errata/ELSA-2026-15968.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsoup3-3.6.5-3.el10_1.11.x86_64.rpm libsoup3-devel-3.6.5-3.el10_1.11.x86_64.rpm libsoup3-doc-3.6.5-3.el10_1.11.noarch.rpm aarch64: libsoup3-3.6.5-3.el10_1.11.aarch64.rpm libsoup3-devel-3.6.5-3.el10_1.11.aarch64.rpm libsoup3-doc-3.6.5-3.el10_1.11.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsoup3-3.6.5-3.el10_1.11.src.rpm Related CVEs: CVE-2026-4271 CVE-2026-5119 Description of changes: [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated rpms for Oracle Linux 10 addressing Moderate severity issues in libsoup3. Check out all the changes and enhancements.. Oracle Linux libsoup3 security patch, Moderate severity updates, Linux application security fixes. . LinuxSecurity.com Team

Calendar%202 May 14, 2026 Oracle
89

Fedora 44 libsoup3 Important Credential Leakage Patch CVE-2026-1539

Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-55dabf3975 2026-03-30 00:14:59.309220+00:00 -------------------------------------------------------------------------------- Name : libsoup3 Product : Fedora 44 Version : 3.6.6 Release : 6.fc44 URL : https://wiki.gnome.org/Projects/libsoup Summary : Soup, an HTTP library implementation Description : Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. -------------------------------------------------------------------------------- Update Information: Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect) -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 19 2026 Milan Crha - 3.6.6-6 - Add patch for CVE-2026-1539 (Also remove Proxy-Authorization header on cross origin redirect) - Resolves: rhbz#2433867 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2433867 - CVE-2026-1539 libsoup3: libsoup: Credential leakage via HTTP redirects [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2433867 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2026-55dabf3975' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Libsoup3 in Fedora 44 receives an important update for fixed CVE-2026-1539 against credential leakage in HTTP redirects.. Fedora 44, libsoup3, credential leakage, HTTP library, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 30, 2026 Important Fedora
219

Rocky Linux 10 RLSA-2026-2410 Libsoup3 Important Buffer Overflow

Important: libsoup3 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:2410", "synopsis": "Important: libsoup3 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for libsoup3.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.\n\nSecurity Fix(es):\n\n* libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2435961", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2435961", "description": ""}], "cves": [{"name": "CVE-2026-1761", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-1761", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "cvss3BaseScore": "8.6", "cwe": "CWE-121"}], "references": [], "publishedAt": "2026-02-13T09:09:56.933620Z", "rpms": {"Rocky Linux 10": {"nvras": ["libsoup3-debugsource-0:3.6.5-3.el10_1.10.aarch64.rpm", "libsoup3-debugsource-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-doc-0:3.6.5-3.el10_1.10.noarch.rpm","libsoup3-debugsource-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-0:3.6.5-3.el10_1.10.src.rpm", "libsoup3-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.aarch64.rpm", "libsoup3-debugsource-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.aarch64.rpm", "libsoup3-debuginfo-0:3.6.5-3.el10_1.10.ppc64le.rpm", "libsoup3-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.s390x.rpm", "libsoup3-devel-0:3.6.5-3.el10_1.10.x86_64.rpm", "libsoup3-0:3.6.5-3.el10_1.10.aarch64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Libsoup3 on Rocky Linux 10 faces an important security update addressing a stack-based buffer overflow issue impacting functionality.. libsoup3 security update, important libsoup3 fix, Rocky Linux 10 buffer overflow, libsoup3 vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 13, 2026 Important Rocky Linux
217

Oracle Linux 10 libsoup3 Important Patch ELSA-2026-2410 CVE-2026-1761

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-2410 http://linux.oracle.com/errata/ELSA-2026-2410.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsoup3-3.6.5-3.el10_1.10.x86_64.rpm libsoup3-devel-3.6.5-3.el10_1.10.x86_64.rpm libsoup3-doc-3.6.5-3.el10_1.10.noarch.rpm aarch64: libsoup3-3.6.5-3.el10_1.10.aarch64.rpm libsoup3-devel-3.6.5-3.el10_1.10.aarch64.rpm libsoup3-doc-3.6.5-3.el10_1.10.noarch.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsoup3-3.6.5-3.el10_1.10.src.rpm Related CVEs: CVE-2026-1761 Description of changes: [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Critical updates for libsoup3 on Oracle Linux 10 include patches for multiple security issues and vulnerabilities.. Oracle Linux, libsoup3, security patch, remote access. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 11, 2026 Important Oracle
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200