https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:57:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04953 bdu:2026-04953 https://cve.radiocsirt.org/vuln/bdu:2026-04953 https://cve.radiocsirt.org/vuln/euvd-2026-277020 EUVD-2026-277020 https://cve.radiocsirt.org/vuln/euvd-2026-277020 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2443 <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p> <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2443 https://cve.radiocsirt.org/vuln/ghsa-hg24-p7xv-jhq8 <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p> <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p> https://cve.radiocsirt.org/vuln/ghsa-hg24-p7xv-jhq8 https://cve.radiocsirt.org/vuln/msrc_cve-2026-2443 msrc_CVE-2026-2443 https://cve.radiocsirt.org/vuln/msrc_cve-2026-2443 https://cve.radiocsirt.org/vuln/oesa-2026-1684 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: libsoup, openEuler:24.03-LTS-SP3: libsoup, openEuler:20.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP4: libsoup, openEuler:24.03-LTS: libsoup, openEuler:24.03-LTS-SP1: libsoup</p> <p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):</p> <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.(CVE-2026-2443)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: libsoup, openEuler:24.03-LTS-SP3: libsoup, openEuler:20.03-LTS-SP4: libsoup, openEuler:22.03-LTS-SP4: libsoup, openEuler:24.03-LTS: libsoup, openEuler:24.03-LTS-SP1: libsoup</p> <p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):</p> <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.(CVE-2026-2443)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1684 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10208-1 <p>libsoup-3_0-0-3.6.5-13.1 on GA media</p> <p>libsoup-3_0-0-3.6.5-13.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10208-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0658-1 <p>Security update for libsoup</p> <p>Security update for libsoup</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0658-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2443 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:Pro:26.04:LTS: libsoup2.4</p> <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:Pro:26.04:LTS: libsoup2.4</p> <p>A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2443