Red Hat Enterprise Linux 9/libsoup

Red Hat · Package

31 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
libsoup: libsoup: HTTP Request Smuggling via Unsigned to Signed Conversion ErrorCVE-2026-6324	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Incomplete fix for CVE-2026-2443: Range suffix overflow in libsoup SoupServerCVE-2026-12549	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: NULL pointer dereference in client when server omits the "nonce" parameter in an Unauthorized response with Digest authenticationCVE-2025-32912	Red Hat Enterprise Linux 6/libsoup Red Hat Enterprise Linux 7/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authenticationCVE-2025-32910	Red Hat Enterprise Linux 6/libsoup Red Hat Enterprise Linux 7/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.cCVE-2025-32909	Red Hat Enterprise Linux 6/libsoup Red Hat Enterprise Linux 7/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Cookie domain validation bypass via uppercase characters in libsoupCVE-2025-4035	Red Hat Enterprise Linux 6/libsoup Red Hat Enterprise Linux 7/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Null pointer dereference in libsoup may lead to Denial Of ServiceCVE-2025-4476	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Low	No fix reported	Not recorded
libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.cCVE-2025-4969	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Global-buffer-overflowCVE-2025-8197	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Unknown	No fix reported	Not recorded
libsoup: Improper Handling of HTTP Vary Header in libsoup CachingCVE-2025-9901	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Out-of-Bounds Read in libsoup WebSocket Frame ProcessingCVE-2026-0716	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 7/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: libsoup: HTTP header injection via specially crafted URLs when an HTTP proxy is configuredCVE-2026-1467	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: libsoup: HTTP header injection or response splitting via CRLF injection in Content-Disposition headerCVE-2026-1536	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
CVE-2026-1539CVE-2026-1539	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: SoupServer: Denial of Service via HTTP request smugglingCVE-2026-1760	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: libsoup: HTTP Request Smuggling via malformed chunk headersCVE-2026-1801	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Low	No fix reported	Not recorded
libsoup: libsoup: Denial of Service via use-after-free in SoupServer during TLS handshakeCVE-2026-2436	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded
libsoup: Out-of-Bounds Read in libsoup handle_partial_get() Leading to Heap Information DisclosureCVE-2026-2443	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Low	No fix reported	Not recorded
libsoup: libsoup: HTTP Request Smuggling via Duplicate Content-Length HeadersCVE-2026-2708	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Low	No fix reported	Not recorded
libsoup: libsoup: HTTP header injection and response splitting via CRLF injection in Content-Type headerCVE-2026-3634	Red Hat Enterprise Linux 10/libsoup3 Red Hat Enterprise Linux 6/libsoup	Red Hat	Medium	No fix reported	Not recorded