CVE catalog

CVE-2025-12105

libsoup vulnerability

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.

Severity: High · CVSS 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Published: Oct 23, 2025, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.46% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "libsoup3",
      "status": "fixed",
      "release": "sid",
      "version": "3.8.0-3"
    },
    {
      "name": "libsoup3",
      "status": "fixed",
      "release": "forky",
      "version": "3.8.0-3"
    },
    {
      "name": "libsoup3",
      "status": "vulnerable",
      "release": "trixie",
      "version": "3.6.5-3"
    },
    {
      "name": "libsoup3",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "3.2.3-0+deb12u2"
    },
    {
      "name": "libsoup2.4",
      "status": "not affected",
      "release": "trixie",
      "version": "2.74.3-10.1"
    },
    {
      "name": "libsoup2.4",
      "status": "not affected",
      "release": "bookworm",
      "version": "2.74.3-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1118783,
      "name": "libsoup3",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "3.6.5-6"
    },
    {
      "bug": 1118783,
      "name": "libsoup3",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "3.6.5-6"
    },
    {
      "bug": 1118783,
      "name": "libsoup3",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1118783,
      "name": "libsoup3",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "libsoup2.4",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "libsoup2.4",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "not yet fixed"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "gir1.2-soup-3.0",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "libsoup-3.0-0",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "libsoup-3.0-common",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "libsoup-3.0-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "libsoup-3.0-doc",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "libsoup-3.0-tests",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.7-0ubuntu1+esm6"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.0.4-2",
        "3.0.4-3",
        "3.0.5-1",
        "3.0.7-0ubuntu1",
        "3.0.7-0ubuntu1+esm1",
        "3.0.7-0ubuntu1+esm2",
        "3.0.7-0ubuntu1+esm3",
        "3.0.7-0ubuntu1+esm4",
        "3.0.7-0ubuntu1+esm5"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.0.7-0ubuntu1+esm6",
      "provider_record_id": "USN-7932-1"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-5ubuntu0.6"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "3.4.2-4",
        "3.4.4-1",
        "3.4.4-2",
        "3.4.4-4",
        "3.4.4-5",
        "3.4.4-5build1",
        "3.4.4-5build2",
        "3.4.4-5ubuntu0.1",
        "3.4.4-5ubuntu0.2",
        "3.4.4-5ubuntu0.3",
        "3.4.4-5ubuntu0.4",
        "3.4.4-5ubuntu0.5"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6",
      "provider_record_id": "USN-7932-1"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.5-4ubuntu0.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "3.6.5-1",
        "3.6.5-1ubuntu1",
        "3.6.5-3",
        "3.6.5-4"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.6.5-4ubuntu0.1",
      "provider_record_id": "USN-7932-1"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.7-0ubuntu1+esm6"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.0.4-2",
        "3.0.4-3",
        "3.0.5-1",
        "3.0.7-0ubuntu1",
        "3.0.7-0ubuntu1+esm1",
        "3.0.7-0ubuntu1+esm2",
        "3.0.7-0ubuntu1+esm3",
        "3.0.7-0ubuntu1+esm4",
        "3.0.7-0ubuntu1+esm5"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.0.7-0ubuntu1+esm6",
      "provider_record_id": "UBUNTU-CVE-2025-12105"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-5ubuntu0.6"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "3.4.2-4",
        "3.4.4-1",
        "3.4.4-2",
        "3.4.4-4",
        "3.4.4-5",
        "3.4.4-5build1",
        "3.4.4-5build2",
        "3.4.4-5ubuntu0.1",
        "3.4.4-5ubuntu0.2",
        "3.4.4-5ubuntu0.3",
        "3.4.4-5ubuntu0.4",
        "3.4.4-5ubuntu0.5"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.4.4-5ubuntu0.6",
      "provider_record_id": "UBUNTU-CVE-2025-12105"
    },
    {
      "name": "libsoup3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.5-4ubuntu0.1"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "3.6.5-1",
        "3.6.5-1ubuntu1",
        "3.6.5-3",
        "3.6.5-4"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.6.5-4ubuntu0.1",
      "provider_record_id": "UBUNTU-CVE-2025-12105"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.6-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.6.6-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:20902-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.6-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.6.6-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:20902-1"
    },
    {
      "name": "libsoup",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.6-160000.1.1"
            }
          ]
        }
      ],
      "release": "leap 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.6.6-160000.1.1",
      "provider_record_id": "OPENSUSE-SU-2026:20384-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.6-160000.1.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.2",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.6.6-160000.1.1",
      "provider_record_id": "SUSE-SU-2026:20752-1"
    },
    {
      "name": "libsoup",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.5-9.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.6.5-9.1",
      "provider_record_id": "OPENSUSE-SU-2025:15766-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-slfo.1.1_6.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.1",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.4.4-slfo.1.1_6.1",
      "provider_record_id": "SUSE-SU-2026:20360-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-150600.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.4.4-150600.3.21.1",
      "provider_record_id": "SUSE-SU-2026:0017-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-150600.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp6-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.4.4-150600.3.21.1",
      "provider_record_id": "SUSE-SU-2026:0017-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-150600.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.4.4-150600.3.21.1",
      "provider_record_id": "SUSE-SU-2026:0017-1"
    },
    {
      "name": "libsoup",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.4-150600.3.21.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.4.4-150600.3.21.1",
      "provider_record_id": "SUSE-SU-2026:0017-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-espos",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "manager proxy lts 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.4-150400.3.21.1"
            }
          ]
        }
      ],
      "release": "manager server lts 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.0.4-150400.3.21.1",
      "provider_record_id": "SUSE-SU-2025:4514-1"
    },
    {
      "name": "libsoup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-13.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.0",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.4.2-13.1",
      "provider_record_id": "SUSE-SU-2026:20529-1"
    }
  ]
}

[Debian bug #1118783]

Publisher notes

[trixie] libsoup3: Minor issue [bookworm] libsoup3: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[gir1.2-soup-2.4]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · amd64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · arm64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[gir1.2-soup-3.0]Unknown
Source package: [libsoup3]
Details (2)
- 3.2.3-0+deb12u2 · amd64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
- 3.2.3-0+deb12u2 · arm64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
[libsoup2.4-1]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · amd64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · arm64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[libsoup2.4-common]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · all · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · all · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[libsoup2.4-dev]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · amd64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · arm64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[libsoup2.4-doc]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · all · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · all · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[libsoup2.4-tests]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · amd64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · arm64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[libsoup-3.0-0]Unknown
Source package: [libsoup3]
Details (2)
- 3.2.3-0+deb12u2 · amd64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
- 3.2.3-0+deb12u2 · arm64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
[libsoup-3.0-common]Unknown
Source package: [libsoup3]
Details (2)
- 3.2.3-0+deb12u2 · all · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
- 3.2.3-0+deb12u2 · all · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
[libsoup-3.0-dev]Unknown
Source package: [libsoup3]
Details (2)
- 3.2.3-0+deb12u2 · amd64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
- 3.2.3-0+deb12u2 · arm64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
[libsoup-3.0-doc]Unknown
Source package: [libsoup3]
Details (2)
- 3.2.3-0+deb12u2 · all · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
- 3.2.3-0+deb12u2 · all · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
[libsoup-3.0-tests]Unknown
Source package: [libsoup3]
Details (2)
- 3.2.3-0+deb12u2 · amd64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
- 3.2.3-0+deb12u2 · arm64 · bookworm
  Affected
  usn · libsoup3 · debian · bookworm; usn · libsoup3 · debian · 12
[libsoup-gnome2.4-1]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · amd64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · arm64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
[libsoup-gnome2.4-dev]Unknown
Source package: [libsoup2.4]
Details (2)
- 2.74.3-1+deb12u1 · amd64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm
- 2.74.3-1+deb12u1 · arm64 · bookworm
  Not affected
  usn · libsoup2.4 · debian · bookworm

[Debian 13 (Trixie)]

[gir1.2-soup-3.0]Unknown
Source package: [libsoup3]
Details (2)
- 3.6.5-3 · amd64 · trixie
  Affected
  usn · libsoup3 · debian · 13
- 3.6.5-3 · arm64 · trixie
  Affected
  usn · libsoup3 · debian · 13
[libsoup-3.0-0]Unknown
Source package: [libsoup3]
Details (2)
- 3.6.5-3 · amd64 · trixie
  Affected
  usn · libsoup3 · debian · 13
- 3.6.5-3 · arm64 · trixie
  Affected
  usn · libsoup3 · debian · 13
[libsoup-3.0-common]Unknown
Source package: [libsoup3]
Details (2)
- 3.6.5-3 · all · trixie
  Affected
  usn · libsoup3 · debian · 13
- 3.6.5-3 · all · trixie
  Affected
  usn · libsoup3 · debian · 13
[libsoup-3.0-dev]Unknown
Source package: [libsoup3]
Details (2)
- 3.6.5-3 · amd64 · trixie
  Affected
  usn · libsoup3 · debian · 13
- 3.6.5-3 · arm64 · trixie
  Affected
  usn · libsoup3 · debian · 13
[libsoup-3.0-doc]Unknown
Source package: [libsoup3]
Details (2)
- 3.6.5-3 · all · trixie
  Affected
  usn · libsoup3 · debian · 13
- 3.6.5-3 · all · trixie
  Affected
  usn · libsoup3 · debian · 13
[libsoup-3.0-tests]Unknown
Source package: [libsoup3]
Details (2)
- 3.6.5-3 · amd64 · trixie
  Affected
  usn · libsoup3 · debian · 13
- 3.6.5-3 · arm64 · trixie
  Affected
  usn · libsoup3 · debian · 13

Next results

Observed: Oct 24, 2026, 5:10:59 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]