The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may result in application crashes or arbitrary code execution in applications that process untrusted server responses, and it does not require authentication or user interaction.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsoup-develUpgrade libsoup | Feb 10, 2026 | Feb 9, 2026 |
| Amazon_linux_2023 | — | Upgrade libsoup-develUpgrade libsoup-docUpgrade libsoup-debuginfoUpgrade libsoup3Upgrade libsoup3-debuginfoUpgrade libsoup3-debugsourceUpgrade libsoup3-develUpgrade libsoup-debugsourceUpgrade libsoup3-docUpgrade libsoup | May 28, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade libsoup3-docUpgrade libsoup3-develUpgrade libsoup-develUpgrade libsoupUpgrade libsoup3 | Feb 9, 2026 | Feb 2, 2026 |
| Redhat_linux | — | Upgrade spice-client-win-x86Upgrade libsoup-debuginfoUpgrade libsoup3-debuginfoUpgrade libsoup3-develUpgrade libsoup-debugsourceUpgrade libsoupUpgrade libsoup3-docUpgrade spice-client-win-x64Upgrade libsoup3No solution existsUpgrade libsoup-develUpgrade libsoup3-debugsource | Feb 6, 2026 | Feb 2, 2026 |
| Rocky_linux | — | Upgrade libsoup3-debugsourceUpgrade libsoup-develUpgrade libsoup3Upgrade libsoupUpgrade libsoup3-develUpgrade libsoup-debuginfoUpgrade libsoup3-debuginfoUpgrade libsoup-debugsource | Feb 9, 2026 | Feb 7, 2026 |
| Suse | — | Upgrade libsoup-2_4-1Upgrade libsoup2-develUpgrade libsoup2-devel-32bitUpgrade libsoup-langUpgrade typelib-1_0-Soup-3_0Upgrade libsoup-3_0-0Upgrade typelib-1_0-Soup-2_4Upgrade libsoup-2_4-1-32bitUpgrade libsoup2-langUpgrade libsoup-devel-32bitUpgrade libsoup-develUpgrade libsoup-3_0-0-32bit | Feb 11, 2026 | Feb 10, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub