https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:32:57.472852+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:18183 ALSA-2025:18183 — Important: libsoup3 security update 2026-10-04T10:32:57.872541+00:00

Affected: AlmaLinux:10: libsoup3-doc

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.

Security Fix(es):

* libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-02735 bdu:2026-02735 2026-10-04T10:32:57.872640+00:00 bdu:2026-02735 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0938 certfr-2025-avi-0938 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-04T10:32:57.872661+00:00 certfr-2025-avi-0938 https://cve.radiocsirt.org/vuln/euvd-2026-331175 EUVD-2026-331175 2026-10-04T10:32:57.872678+00:00 EUVD-2026-331175 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11021 fkie_cve-2025-11021 2026-10-04T10:32:57.872690+00:00

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

 https://cve.radiocsirt.org/vuln/ghsa-fjfx-vwp2-gqr8 GHSA-fjfx-vwp2-gqr8 2026-10-04T10:32:57.872714+00:00

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11021 msrc_CVE-2025-11021 — Libsoup: out-of-bounds read in cookie date handling of libsoup http library 2026-10-04T10:32:57.872729+00:00 msrc_CVE-2025-11021 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15633-1 openSUSE-SU-2025:15633-1 — libsoup-3_0-0-3.6.5-7.1 on GA media 2026-10-04T10:32:57.872744+00:00

libsoup-3_0-0-3.6.5-7.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:18183 RHSA-2025:18183 — Red Hat Security Advisory: libsoup3 security update 2026-10-04T10:32:57.872760+00:00

libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library

 https://cve.radiocsirt.org/vuln/suse-su-2025:20937-1 SUSE-SU-2025:20937-1 — Security update for libsoup 2026-10-04T10:32:57.872775+00:00

Security update for libsoup

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11021 UBUNTU-CVE-2025-11021 2026-10-04T10:32:57.872789+00:00

Affected: Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:26.04:LTS: libsoup2.4

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2311 WID-SEC-W-2025-2311 — Red Hat Enterprise Linux (libsoup3): Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-04T10:32:57.872824+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.