Red Hat Security Advisory

RHSA-2025:19713

libsoup security update

Released 2025-11-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libsoup-2.72.0-10.el9_6.3, libsoup-devel-2.72.0-10.el9_6.3

TI-2025-04434 CVE-2025-4945 · GHSA-mwcf-jv2p-mmpx

MEDIUM 51

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00699 Published 2025-05-19 Partial fix · 3.6.5-3.el10_0.9, 3.6.5-3.el10_1.6 +11 CWE-190

TI-2025-10091 CVE-2025-11021 · GHSA-fjfx-vwp2-gqr8

MEDIUM 40

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00636 Published 2025-09-26 Partial fix · 3.6.5-3.el10_0.7, 3.6.5-3.el10_1.6 +11 CWE-125