Summary
[3.6.5-7]
- Add patch for CVE-2025-12105
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libsoup3 | 0:3.6.5-3.el10_1.7 |
| Oracle Linux · 10 | libsoup3-devel | 0:3.6.5-3.el10_1.7 |
| Oracle Linux · 10 | libsoup3-doc | 0:3.6.5-3.el10_1.7 |
Vulnerabilities 1
-
High 7.5
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue…