Ubuntu fixes libsoup cookie-jar leak from USN-8890-1
The follow-up also restates HTTP/2 denial of service and HTTPS proxy disclosure, including CVE-2026-4271.
Stories per day · 30 days
Relatedubuntu3denial-of-service2data-uri1http21https-proxy1information-disclosure1regression1web-socket1
5 stories, newest first · one card per story
Stories tagged #libsoup
libsoup vulnerabilities in Ubuntu
Two vulnerabilities in libsoup on Ubuntu 22.04, 24.04, 26.04 and 26.10 could let remote attackers cause crashes or expose sensitive information (CVE-2026-12478, CVE-2026-102555).
Ubuntu patches libsoup3 flaws on 26.10 in USN-8890-2
The notice backports earlier libsoup fixes, including an HTTP/2 denial of service and an HTTPS proxy information leak.
USN-8890-1: libsoup vulnerabilities
Ubuntu fixed libsoup flaws that could cause denial of service, leak proxy data, or bypass security checks.
USN-8780-1: libsoup vulnerabilities
Ubuntu fixed three libsoup flaws enabling HTTP header injection via proxies and leakage of proxy credentials or request data.