<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-05T03:57:38.721562+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2026-04953</id>
    <title>bdu:2026-04953</title>
    <updated>2026-10-05T03:57:38.734504+00:00</updated>
    <content>bdu:2026-04953</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2026-04953"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-277020</id>
    <title>EUVD-2026-277020</title>
    <updated>2026-10-05T03:57:38.734539+00:00</updated>
    <content>EUVD-2026-277020</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-277020"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-2443</id>
    <title>fkie_cve-2026-2443</title>
    <updated>2026-10-05T03:57:38.734553+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-2443"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-hg24-p7xv-jhq8</id>
    <title>GHSA-hg24-p7xv-jhq8</title>
    <updated>2026-10-05T03:57:38.734582+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-hg24-p7xv-jhq8"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2026-2443</id>
    <title>msrc_CVE-2026-2443 — Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure</title>
    <updated>2026-10-05T03:57:38.734599+00:00</updated>
    <content>msrc_CVE-2026-2443</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2026-2443"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2026-1684</id>
    <title>OESA-2026-1684 — libsoup security update</title>
    <updated>2026-10-05T03:57:38.734615+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: libsoup, openEuler:24.03-LTS-SP3: libsoup, openEuler:20.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP4: libsoup, openEuler:24.03-LTS: libsoup, openEuler:24.03-LTS-SP1: libsoup</p>
<p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):</p>
<p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.(CVE-2026-2443)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2026-1684"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2026:10208-1</id>
    <title>openSUSE-SU-2026:10208-1 — libsoup-3_0-0-3.6.5-13.1 on GA media</title>
    <updated>2026-10-05T03:57:38.734647+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libsoup-3_0-0-3.6.5-13.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2026:10208-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2026:0658-1</id>
    <title>SUSE-SU-2026:0658-1 — Security update for libsoup</title>
    <updated>2026-10-05T03:57:38.734663+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for libsoup</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2026:0658-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2443</id>
    <title>UBUNTU-CVE-2026-2443</title>
    <updated>2026-10-05T03:57:38.734677+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:Pro:26.04:LTS: libsoup2.4</p>
<p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2443"/>
  </entry>
</feed>
