Summary
[3.6.5-11]
- Add patches for CVE-2026-4271 and CVE-2026-5119
[3.6.5-10]
- Add patch for CVE-2026-1761
[3.6.5-9]
- Fix CVE-2026-0719
[3.6.5-8]
- Fix CVE-2025-14523
[3.6.5-7]
- Add patch for CVE-2025-12105
[3.6.5-6]
- Fix integer overflow in date/time parsing
[3.6.5-5]
- Bump revision number
[3.6.5-4]
- Fix several CVEs
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libsoup3 | 0:3.6.5-3.el10_2.11 |
| Oracle Linux · 10 | libsoup3-devel | 0:3.6.5-3.el10_2.11 |
| Oracle Linux · 10 | libsoup3-doc | 0:3.6.5-3.el10_2.11 |
Vulnerabilities 2
-
Medium 5.9
Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept…
-
Medium 5.3
Libsoup: libsoup: denial of service via use-after-free in http/2 server
A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentica…