Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | libsoup-debuginfo | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | libsoup-debugsource | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream | libsoup-devel | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::baseos | libsoup | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::baseos | libsoup-debuginfo | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 AUS rhel_aus:8.4::baseos | libsoup-debugsource | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | libsoup-debuginfo | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | libsoup-debugsource | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream | libsoup-devel | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::baseos | libsoup | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::baseos | libsoup-debuginfo | 0:2.62.3-2.el8_4.8 |
| Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::baseos | libsoup-debugsource | 0:2.62.3-2.el8_4.8 |
Vulnerabilities 2
-
High 8.6
Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of s…
-
High 8.6
Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response
A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2427906
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2435961
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2402.json
-
report
https://access.redhat.com/security/cve/CVE-2026-0719
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-0719
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0719
-
article
https://gitlab.gnome.org/GNOME/libsoup/-/issues/477
-
report
https://access.redhat.com/security/cve/CVE-2026-1761
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-1761
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-1761
-
article
https://gitlab.gnome.org/GNOME/libsoup/-/issues/493