A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 13, 2026 |
| Suse | — | Upgrade libsoup-2_4-1-32bitUpgrade typelib-1_0-Soup-3_0Upgrade typelib-1_0-Soup-2_4Upgrade libsoup-langUpgrade libsoup-devel-32bitUpgrade libsoup-3_0-0Upgrade libsoup-2_4-1Upgrade libsoup2-develUpgrade libsoup-3_0-0-32bitUpgrade libsoup-develUpgrade libsoup2-langUpgrade libsoup2-devel-32bit | Feb 27, 2026 | Feb 27, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub