Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Libsoup Security Update Affects Linux Systems

published 9 months ago

Summary

A security update is available for Libsoup, a library used by some Linux applications. This update fixes a vulnerability that could allow an attacker to execute malicious code on a vulnerable system. Linux system administrators should update their Libsoup packages to the latest version to protect their systems.

What to do

Update redhat libsoup to version 0:2.72.0-8.el9_2.10.
Update redhat libsoup-debuginfo to version 0:2.72.0-8.el9_2.10.
Update redhat libsoup-debugsource to version 0:2.72.0-8.el9_2.10.
Update redhat libsoup-devel to version 0:2.72.0-8.el9_2.10.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.2::appstream	redhat	libsoup	< 0:2.72.0-8.el9_2.10 Fix: upgrade to 0:2.72.0-8.el9_2.10
Red Hat:rhel_e4s:9.2::appstream	redhat	libsoup-debuginfo	< 0:2.72.0-8.el9_2.10 Fix: upgrade to 0:2.72.0-8.el9_2.10
Red Hat:rhel_e4s:9.2::appstream	redhat	libsoup-debugsource	< 0:2.72.0-8.el9_2.10 Fix: upgrade to 0:2.72.0-8.el9_2.10
Red Hat:rhel_e4s:9.2::appstream	redhat	libsoup-devel	< 0:2.72.0-8.el9_2.10 Fix: upgrade to 0:2.72.0-8.el9_2.10

Original advisory text

Red Hat Security Advisory: libsoup security update

References

https://access.redhat.com/errata/RHSA-2026:2005 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2427906 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2435961 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2005.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-0719 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0719 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0719 Vendor Advisory
https://gitlab.gnome.org/GNOME/libsoup/-/issues/477 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-1761 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-1761 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-1761 Vendor Advisory
https://gitlab.gnome.org/GNOME/libsoup/-/issues/493 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.6 High

Timeline

Published5 Feb 2026

Updated9 Jun 2026

First seen9 Jun 2026

Sources

RHSA-2026:2005 · OSV

Track software like this

Free during beta