Critical Security Flaw in libsoup: Stack-Based Buffer Overflow Vulnerabilities
Summary
ALSA-2026:2216: Important: libsoup security update. Affects libsoup versions < 2.72.0-12.el9_7.5. Fixed in 2.72.0-12.el9_7.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
libsoup is an HTTP client and server library designed for GNOME applications, providing essential functionalities for web communication. It facilitates the handling of HTTP requests and responses, making it a vital component for applications that rely on web services. However, recent vulnerabilities have been identified that could compromise the security of applications utilizing this library.
Vulnerability Detail
The vulnerabilities in libsoup stem from a signed to unsigned conversion error during NTLM authentication (CVE-2026-0719) and a stack-based buffer overflow in multipart response parsing (CVE-2026-1761). These issues could allow an attacker to execute arbitrary code, potentially leading to unauthorized access or system compromise. The vulnerabilities arise from improper handling of data, which can be exploited through crafted HTTP requests.
How To Fix
Minimum fixed version
2.72.0-12.el9_7.5
This is the first release that contains the fix.
sudo dnf update libsoupTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting access to the affected services or implementing additional security layers, such as firewalls or intrusion detection systems, to mitigate potential exploitation until the packages are updated.
Conclusion
The identified vulnerabilities in libsoup pose significant security risks that could lead to unauthorized access and system compromise. It is crucial to update to the latest patched versions of the affected packages to mitigate these risks. Additionally, utilizing tools like Vulert can help monitor for vulnerabilities in your applications.
See every vulnerability recorded for libsoup →
FAQ
libsoup is a library that provides HTTP client and server functionalities for GNOME applications, enabling them to communicate over the web.
The vulnerabilities include a signed to unsigned conversion error leading to a buffer overflow during NTLM authentication and a stack-based buffer overflow in multipart response parsing.
An attacker can exploit these vulnerabilities by sending specially crafted HTTP requests that trigger the buffer overflow, potentially allowing them to execute arbitrary code.
If immediate updates are not possible, consider implementing network security measures to limit exposure to the vulnerabilities until a patch can be applied.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software by analyzing a manifest file like package-lock.json. You can check your application using the Vulert playground at Vulert Scanner without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for libsoup.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
