Wednesday 4 November
Global

Your region, kept on this device.

Ubuntu notice USN-8975-1 covers ten vulnerabilities in libsoup

Severity
Medium
Sources
1

Security Notice USN-8975-1 lists ten CVEs in libsoup, covering WebSocket frames and messages, data URIs, multipart messages, proxy credentials and HTTP request handling. A remote attacker may be able to crash applications, obtain sensitive information or inject arbitrary HTTP requests. Several entries are limited to specific Ubuntu LTS releases, including 18.04, 20.04, 22.04, 24.04, 26.04 and 26.10.

For IT people · Written by AI from 1 source · Wrong?

What to do

  1. Check whether your systems run libsoup on the affected Ubuntu releases.
  2. Apply the Ubuntu security update for libsoup on affected systems.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Tue 3 NovemberUSN-8975-1: libsoup vulnerabilitiesUbuntu Security Notices

Who reported · 1 outlet

Ubuntu Security Notices

Who and what is in it

Products

Report a problem