The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes silent omission of requested byte ranges from HTTP 206 Partial Content responses on resources larger than approximately 2 GB.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libsoup-debuginfoUpgrade libsoup-develUpgrade libsoup | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade libsoup-docUpgrade libsoup-debugsourceUpgrade libsoup-debuginfoUpgrade libsoup3-develUpgrade libsoup3-debuginfoUpgrade libsoup3-docUpgrade libsoupUpgrade libsoup3-debugsourceUpgrade libsoup3Upgrade libsoup-devel | Sep 30, 2026 | Aug 20, 2026 |
| Redhat_linux | — | No solution exists | Aug 24, 2026 | Jul 13, 2026 |
| Ubuntu | — | Upgrade libsoup-3.0-commonUpgrade libsoup2.4-1 (Ubuntu Pro)Upgrade gir1.2-soup-3.0Upgrade gir1.2-soup-2.4Upgrade libsoup-gnome-2.4-1Upgrade libsoup-3.0-0Upgrade libsoup-3.0-common (Ubuntu Pro)Upgrade libsoup-gnome2.4-1 (Ubuntu Pro)Upgrade libsoup-3.0-0 (Ubuntu Pro)Upgrade libsoup-2.4-1Upgrade libsoup-gnome2.4-dev (Ubuntu Pro)Upgrade libsoup2.4-devUpgrade libsoup-3.0-devUpgrade libsoup-gnome-2.4-1 (Ubuntu Pro)Upgrade libsoup-2.4-1 (Ubuntu Pro)Upgrade libsoup2.4-commonUpgrade libsoup-3.0-dev (Ubuntu Pro)Upgrade libsoup2.4-1Upgrade libsoup-gnome2.4-devUpgrade gir1.2-soup-2.4 (Ubuntu Pro)Upgrade gir1.2-soup-3.0 (Ubuntu Pro)Upgrade libsoup-gnome2.4-1Upgrade libsoup2.4-dev (Ubuntu Pro)Upgrade libsoup2.4-common (Ubuntu Pro) | Oct 7, 2026 | Oct 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub