Medium ELSA-2026-13978 1 CVE

Moderate: libsoup security update (Oracle Linux 9)

Published May 6, 2026 · Updated May 6, 2026

Ecosystem: Oracle Linux

Summary

[2.72.0-12.6]
- Backport patch for CVE-2026-5119

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	libsoup	0:2.72.0-12.el9_7.6
Oracle Linux · 9	libsoup-devel	0:2.72.0-12.el9_7.6

Vulnerabilities 1

Medium 5.9

CVE-2026-5119

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Mar 30, 2026