https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:49:47 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:18183 <p><strong>Affected:</strong> AlmaLinux:10: libsoup3-doc</p> <p>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.</p> <p>Security Fix(es):</p> <p>* libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libsoup3-doc</p> <p>Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.</p> <p>Security Fix(es):</p> <p>* libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:18183 https://cve.radiocsirt.org/vuln/bdu:2026-02735 bdu:2026-02735 https://cve.radiocsirt.org/vuln/bdu:2026-02735 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0938 certfr-2025-avi-0938 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0938 https://cve.radiocsirt.org/vuln/euvd-2026-331175 EUVD-2026-331175 https://cve.radiocsirt.org/vuln/euvd-2026-331175 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11021 <p>A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.</p> <p>A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11021 https://cve.radiocsirt.org/vuln/ghsa-fjfx-vwp2-gqr8 <p>A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.</p> <p>A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.</p> https://cve.radiocsirt.org/vuln/ghsa-fjfx-vwp2-gqr8 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11021 msrc_CVE-2025-11021 https://cve.radiocsirt.org/vuln/msrc_cve-2025-11021 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15633-1 <p>libsoup-3_0-0-3.6.5-7.1 on GA media</p> <p>libsoup-3_0-0-3.6.5-7.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15633-1 https://cve.radiocsirt.org/vuln/rhsa-2025:18183 <p>libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library</p> <p>libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library</p> https://cve.radiocsirt.org/vuln/rhsa-2025:18183 https://cve.radiocsirt.org/vuln/suse-su-2025:20937-1 <p>Security update for libsoup</p> <p>Security update for libsoup</p> https://cve.radiocsirt.org/vuln/suse-su-2025:20937-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11021 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:26.04:LTS: libsoup2.4</p> <p>A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:26.04:LTS: libsoup2.4</p> <p>A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-11021 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2311 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2311