Description
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | libsoup2.4 | 2.62.2-2 | — |
| Debian 12 | libsoup2.4 | 2.62.2-2 | — |
| Debian 9 | libsoup2.4 | 2.56.0-2+deb9u2 | DSA-4241-1 |
| Debian 8 | libsoup2.4 | 2.48.0-1+deb8u2 | DLA-1416-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | libsoup2.4 | 2.62.1-1ubuntu0.1 | USN-3701-1 |
| Ubuntu 16.04 LTS | libsoup2.4 | 2.52.2-1ubuntu0.3 | USN-3701-1 |
| Ubuntu 14.04 LTS | libsoup2.4 | 2.44.2-1ubuntu2.3 | USN-3701-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | PackageKit +8 | 1.1.10-1.el7 | RHSA-2018:3140 |
| RHEL 7 | accountsservice +2 | 0.6.50-2.el7 | RHSA-2018:3140 |
| RHEL 7 | adwaita-gtk2-theme +1 | 3.28-2.el7 | RHSA-2018:3140 |
| RHEL 7 | appstream-data | 7-20180614.el7 | RHSA-2018:3140 |
| RHEL 7 | at-spi2-atk +1 | 2.26.2-1.el7 | RHSA-2018:3140 |
| RHEL 7 | at-spi2-core +1 | 2.28.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | atk +1 | 2.28.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | baobab +1 | 3.28.0-2.el7 | RHSA-2018:3140 |
| RHEL 7 | bolt | 0.4-3.el7 | RHSA-2018:3140 |
| RHEL 7 | brasero +3 | 3.12.2-5.el7 | RHSA-2018:3140 |
| RHEL 7 | cairo +4 | 1.15.12-3.el7 | RHSA-2018:3140 |
| RHEL 7 | cheese +2 | 2:3.28.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | clutter-gst3 +1 | 3.0.26-1.el7 | RHSA-2018:3140 |
| RHEL 7 | compat-exiv2-023 | 0.23-2.el7 | RHSA-2018:3140 |
| RHEL 7 | compat-libical1 | 1.0.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | control-center +1 | 1:3.28.1-4.el7 | RHSA-2018:3140 |
| RHEL 7 | dconf +1 | 0.28.0-4.el7 | RHSA-2018:3140 |
| RHEL 7 | devhelp +2 | 1:3.28.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | ekiga | 4.0.1-8.el7 | RHSA-2018:3140 |
| RHEL 7 | empathy | 3.12.13-1.el7 | RHSA-2018:3140 |
| RHEL 7 | eog +3 | 3.28.3-1.el7 | RHSA-2018:3140 |
| RHEL 7 | evince +5 | 3.28.2-5.el7 | RHSA-2018:3140 |
| RHEL 7 | evolution +9 | 3.28.5-2.el7 | RHSA-2018:3140 |
| RHEL 7 | evolution-ews +7 | 3.28.5-1.el7 | RHSA-2018:3140 |
| RHEL 7 | evolution-mapi +1 | 3.28.3-2.el7 | RHSA-2018:3140 |
| RHEL 7 | file-roller +3 | 3.28.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | flatpak +2 | 1.0.2-2.el7 | RHSA-2018:3140 |
| RHEL 7 | flatpak-builder | 1.0.0-2.el7 | RHSA-2018:3140 |
| RHEL 7 | folks +2 | 1:0.11.4-1.el7 | RHSA-2018:3140 |
| RHEL 7 | fontconfig +2 | 2.13.0-4.3.el7 | RHSA-2018:3140 |
| RHEL 7 | freetype | 2.8-12.el7 | RHSA-2018:3140 |
| RHEL 7 | fwupd | 1.0.8-4.el7 | RHSA-2018:3140 |
| RHEL 7 | fwupdate +2 | 12-5.el7 | RHSA-2018:3140 |
| RHEL 7 | gcr +15 | 3.28.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gdk-pixbuf2 | 2.36.12-3.el7 | RHSA-2018:3140 |
| RHEL 7 | gdm | 1:3.28.2-9.el7 | RHSA-2018:3140 |
| RHEL 7 | geoclue2 +1 | 2.4.8-1.el7 | RHSA-2018:3140 |
| RHEL 7 | geocode-glib | 3.26.0-2.el7 | RHSA-2018:3140 |
| RHEL 7 | gjs | 1.52.3-1.el7 | RHSA-2018:3140 |
| RHEL 7 | glade +1 | 3.22.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | glib-networking | 2.56.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | glib2 | 2.56.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | glibmm24 | 2.56.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gnome-bluetooth +1 | 1:3.28.2-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gnome-dictionary | 3.26.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | gnome-keyring +8 | 3.28.2-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gnome-session +11 | 3.28.1-5.el7 | RHSA-2018:3140 |
| RHEL 7 | gnome-shell | 3.28.3-6.el7 | RHSA-2018:3140 |
| RHEL 7 | gnome-software | 3.28.2-3.el7 | RHSA-2018:3140 |
| RHEL 7 | gobject-introspection | 1.56.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gom | 0.3.3-1.el7 | RHSA-2018:3140 |
| RHEL 7 | google-noto-emoji-fonts +1 | 20180508-4.el7 | RHSA-2018:3140 |
| RHEL 7 | grilo | 0.3.6-1.el7 | RHSA-2018:3140 |
| RHEL 7 | grilo-plugins | 0.3.7-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gspell | 1.6.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gssdp +3 | 1.0.2-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gstreamer1-plugins-base | 1.10.4-2.el7 | RHSA-2018:3140 |
| RHEL 7 | gtk3 +2 | 3.22.30-3.el7 | RHSA-2018:3140 |
| RHEL 7 | gtksourceview3 | 3.24.8-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gucharmap +1 | 10.0.4-1.el7 | RHSA-2018:3140 |
| RHEL 7 | gupnp | 1.0.2-5.el7 | RHSA-2018:3140 |
| RHEL 7 | gupnp-igd | 0.2.5-2.el7 | RHSA-2018:3140 |
| RHEL 7 | gvfs +9 | 1.36.2-1.el7 | RHSA-2018:3140 |
| RHEL 7 | harfbuzz +1 | 1.7.5-2.el7 | RHSA-2018:3140 |
| RHEL 7 | json-glib | 1.4.2-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libappstream-glib | 0.7.8-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libchamplain +1 | 0.12.16-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libcroco | 0.6.12-4.el7 | RHSA-2018:3140 |
| RHEL 7 | libgdata | 0.17.9-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libgee | 0.20.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libgepub | 0.6.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libgexiv2 | 0.10.8-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libgnomekbd +2 | 3.26.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libgovirt | 0.3.4-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libgtop2 | 2.38.0-3.el7 | RHSA-2018:3140 |
| RHEL 7 | libgweather +3 | 3.28.2-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libgxps | 0.3.0-4.el7 | RHSA-2018:3140 |
| RHEL 7 | libical | 3.0.3-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libjpeg-turbo | 1.2.90-6.el7 | RHSA-2018:3140 |
| RHEL 7 | libmediaart | 1.9.4-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libosinfo | 1.1.0-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libpeas +2 | 1.22.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | librsvg2 +1 | 2.40.20-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libsecret | 0.18.6-1.el7 | RHSA-2018:3140 |
| RHEL 7 | libsoup | 2.62.2-2.el7 | RHSA-2018:3140 |
| RHEL 7 | libwnck3 | 3.24.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | mozjs52 | 52.9.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | mutter | 3.28.3-4.el7 | RHSA-2018:3140 |
| RHEL 7 | nautilus +1 | 3.26.3.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | nautilus-sendto | 1:3.8.6-1.el7 | RHSA-2018:3140 |
| RHEL 7 | openchange | 2.3-3.el7 | RHSA-2018:3140 |
| RHEL 7 | osinfo-db | 20180531-1.el7 | RHSA-2018:3140 |
| RHEL 7 | pango | 1.42.4-1.el7 | RHSA-2018:3140 |
| RHEL 7 | poppler +3 | 0.26.5-20.el7 | RHSA-2018:3140 |
| RHEL 7 | pyatspi +1 | 2.26.0-3.el7 | RHSA-2018:3140 |
| RHEL 7 | redhat-logos | 70.0.3-7.el7 | RHSA-2018:3140 |
| RHEL 7 | rest | 0.8.1-2.el7 | RHSA-2018:3140 |
| RHEL 7 | rhythmbox | 3.4.2-2.el7 | RHSA-2018:3140 |
| RHEL 7 | seahorse-nautilus | 3.11.92-11.el7 | RHSA-2018:3140 |
| RHEL 7 | shotwell | 0.28.4-1.el7 | RHSA-2018:3140 |
| RHEL 7 | totem +1 | 1:3.26.2-1.el7 | RHSA-2018:3140 |
| RHEL 7 | totem-pl-parser | 3.26.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | upower | 0.99.7-1.el7 | RHSA-2018:3140 |
| RHEL 7 | vino | 3.22.0-7.el7 | RHSA-2018:3140 |
| RHEL 7 | vte291 +1 | 0.52.2-2.el7 | RHSA-2018:3140 |
| RHEL 7 | wayland +5 | 1.15.0-1.el7 | RHSA-2018:3140 |
| RHEL 7 | wayland-protocols +1 | 1.14-1.el7 | RHSA-2018:3140 |
| RHEL 7 | webkitgtk4 +2 | 2.20.5-1.el7 | RHSA-2018:3140 |
| RHEL 7 | yelp +2 | 2:3.28.1-1.el7 | RHSA-2018:3140 |
| RHEL 7 | zenity +17 | 3.28.1-1.el7 | RHSA-2018:3140 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | libsoup | 2.62.2-5.7.1 | SUSE-SU-2018:2204-1 |
| SLES 12 SP2 | libsoup | 2.62.2-5.7.1 | SUSE-SU-2018:2204-2 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | libsoup | 2.62.2-5.7.1 | SUSE-SU-2018:2204-1 |
| SLES for SAP 12 SP2 | libsoup | 2.62.2-5.7.1 | SUSE-SU-2018:2204-2 |
| SUSE OpenStack Cloud 7 | libsoup | 2.62.2-5.7.1 | SUSE-SU-2018:2204-2 |
| SUSE Enterprise Storage 4 | libsoup | 2.62.2-5.7.1 | SUSE-SU-2018:2204-2 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libsoup | 2.72.0-2.5 | openSUSE-SU-2024:10994-1 |
| openSUSE Leap 15.0 | libsoup | 2.62.2-lp150.2.3.1 | openSUSE-SU-2019:1310-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | PackageKit +8 | 1.1.10-1.0.1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | accountsservice +2 | 0.6.50-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | adwaita-gtk2-theme +1 | 3.28-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | appstream-data | 7-20180614.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | at-spi2-atk +1 | 2.26.2-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | at-spi2-core +1 | 2.28.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | atk +1 | 2.28.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | baobab +2 | 3.28.0-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | bolt | 0.4-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | brasero +3 | 3.12.2-5.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | cairo +4 | 1.15.12-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | cheese +2 | 2:3.28.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | clutter-gst3 +1 | 3.0.26-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | compat-libical1 | 1.0.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | control-center +1 | 1:3.28.1-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | dconf +1 | 0.28.0-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | devhelp +2 | 1:3.28.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | ekiga | 4.0.1-8.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | empathy | 3.12.13-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | eog +3 | 3.28.3-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | evince +5 | 3.28.2-5.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | evolution-ews +7 | 3.28.5-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | evolution-mapi +1 | 3.28.3-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | file-roller +4 | 3.28.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | flatpak +2 | 1.0.2-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | flatpak-builder | 1.0.0-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | folks +2 | 1:0.11.4-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | fontconfig +2 | 2.13.0-4.3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | freetype +2 | 2.8-12.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | fwupd +1 | 1.0.8-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | fwupdate +3 | 12-5.0.1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gcr +18 | 3.28.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gdk-pixbuf2 +2 | 2.36.12-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gdm +2 | 1:3.28.2-9.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gedit +1 | 2:3.28.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gedit-plugins +18 | 3.28.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | geoclue2 +3 | 2.4.8-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | geocode-glib +1 | 3.26.0-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gjs +2 | 1.52.3-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | glade +2 | 3.22.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | glib-networking +1 | 2.56.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | glib2 +5 | 2.56.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | glibmm24 +2 | 2.56.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gnome-bluetooth +2 | 1:3.28.2-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gnome-dictionary | 3.26.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gnome-keyring +16 | 3.28.2-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gnome-session +23 | 3.28.1-5.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gnome-shell | 3.28.3-6.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gnome-software +2 | 3.28.2-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gobject-introspection +1 | 1.56.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gom +1 | 0.3.3-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | google-noto-emoji-fonts +1 | 20180508-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | grilo +1 | 0.3.6-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | grilo-plugins | 0.3.7-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gspell +2 | 1.6.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gssdp +5 | 1.0.2-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gstreamer1-plugins-base +3 | 1.10.4-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gtk-doc | 1.28-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gtk3 +6 | 3.22.30-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gtksourceview3 +2 | 3.24.8-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gucharmap +2 | 10.0.4-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gupnp +2 | 1.0.2-5.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gupnp-igd +2 | 0.2.5-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | gvfs +11 | 1.36.2-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | harfbuzz +2 | 1.7.5-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | json-glib +2 | 1.4.2-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libappstream-glib +3 | 0.7.8-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libchamplain +3 | 0.12.16-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libcroco +1 | 0.6.12-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgdata +1 | 0.17.9-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgee +1 | 0.20.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgepub +1 | 0.6.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgexiv2 +2 | 0.10.8-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgnomekbd +3 | 3.26.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgovirt +1 | 0.3.4-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgtop2 +1 | 2.38.0-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgweather +6 | 3.28.2-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libgxps +2 | 0.3.0-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libical +4 | 3.0.3-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libmediaart +2 | 1.9.4-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libosinfo +2 | 1.1.0-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libpeas +3 | 1.22.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | librsvg2 +2 | 2.40.20-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libsecret +1 | 0.18.6-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libsoup +1 | 2.62.2-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | libwnck3 +1 | 3.24.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | mozjs52 +1 | 52.9.0-1.0.1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | mutter +1 | 3.28.3-4.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | nautilus +2 | 3.26.3.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | nautilus-sendto | 1:3.8.6-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | openchange +3 | 2.3-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | oracle-logos | 70.0.3-4.0.9.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | osinfo-db | 20180531-1.0.1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | pango +2 | 1.42.4-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | poppler +9 | 0.26.5-20.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | python2-pyatspi | 2.26.0-3.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | rest +1 | 0.8.1-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | rhythmbox +1 | 3.4.2-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | seahorse-nautilus | 3.11.92-11.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | shotwell | 0.28.4-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | totem +2 | 1:3.26.2-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | totem-pl-parser +1 | 3.26.1-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | turbojpeg +5 | 1.2.90-6.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | upower +2 | 0.99.7-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | vala +4 | 0.40.8-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | vino | 3.22.0-7.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | vte291 +2 | 0.52.2-2.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | wayland-doc +5 | 1.15.0-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | wayland-protocols-devel | 1.14-1.el7 | ELSA-2018-3140 |
| Oracle Linux 7 | webkitgtk4 +3 | 2.20.5-1.el7 | ELSA-2018-3140 |
Advisories 9
- RHSA-2018:3140 Red Hat Security Advisory: GNOME security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- USN-3701-1 libsoup2.4 vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-4241-1 libsoup2.4 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1416-1 libsoup2.4 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10994-1 libsoup-2_4-1-2.72.0-2.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2204-1 Security update for libsoup SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2204-2 Security update for libsoup SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:1310-1 Security update for libsoup SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2018-3140 Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 5, 2018
References
- FEDORA-2018-fb2afee474 vendor-advisory
- https://gitlab.gnome.org/GNOME/libsoup/issues/3
- RHSA-2018:3505 vendor-advisory
- DSA-4241 vendor-advisory
- [debian-lts-announce] 20180706 [SECURITY] [DLA 1416-1] libsoup2.4 security update mailing-list
- USN-3701-1 vendor-advisory
- RHSA-2018:3140 vendor-advisory
- https://gitlab.gnome.org/GNOME/gnome-sdk-images/commit/4215b8a21b3b3055e947312a8920df94f93ba047
- https://gitlab.gnome.org/GNOME/libsoup/commit/db2b0d5809d5f8226d47312b40992cadbcde439f
- RHBA-2019:0327 vendor-advisory
- openSUSE-SU-2019:1310 vendor-advisory