Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-11021

Fixed in a distro release EPSS <1%CVSS 7.5

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

Published 2025-09-26 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 10libsoup33.6.5-3.el10_1.6
AlmaLinux 10libsoup3-devel3.6.5-3.el10_1.6
AlmaLinux 10libsoup3-doc3.6.5-3.el10_0.7
AlmaLinux 10libsoup3-doc3.6.5-3.el10_1.6
AlmaLinux 8libsoup2.62.3-10.el8_10
AlmaLinux 8libsoup-devel2.62.3-10.el8_10
AlmaLinux 9libsoup2.72.0-12.el9_7.1
AlmaLinux 9libsoup-devel2.72.0-12.el9_7.1
Debian 12libsoup3no fix
Debian 13libsoup3no fix
Debian 14libsoup33.6.5-5
Red Hat Enterprise Linux 10.0libsoup30:3.6.5-3.el10_0.7
Red Hat Enterprise Linux 10.0libsoup3-debuginfo0:3.6.5-3.el10_0.7
Red Hat Enterprise Linux 10.0libsoup3-debugsource0:3.6.5-3.el10_0.7
Red Hat Enterprise Linux 10.0libsoup3-devel0:3.6.5-3.el10_0.7
Red Hat Enterprise Linux 10.0libsoup3-doc0:3.6.5-3.el10_0.7
Red Hat Enterprise Linux 10.1libsoup30:3.6.5-3.el10_1.6
Red Hat Enterprise Linux 10.1libsoup3-debuginfo0:3.6.5-3.el10_1.6
Red Hat Enterprise Linux 10.1libsoup3-debugsource0:3.6.5-3.el10_1.6
Red Hat Enterprise Linux 10.1libsoup3-devel0:3.6.5-3.el10_1.6
Red Hat Enterprise Linux 10.1libsoup3-doc0:3.6.5-3.el10_1.6
Red Hat Enterprise Linux 8libsoup0:2.62.3-10.el8_10
Red Hat Enterprise Linux 8libsoup-debuginfo0:2.62.3-10.el8_10
Red Hat Enterprise Linux 8libsoup-debugsource0:2.62.3-10.el8_10
Red Hat Enterprise Linux 8libsoup-devel0:2.62.3-10.el8_10
Red Hat Enterprise Linux 9libsoup0:2.72.0-10.el9_6.3
Red Hat Enterprise Linux 9libsoup0:2.72.0-12.el9_7.1
Red Hat Enterprise Linux 9libsoup-debuginfo0:2.72.0-10.el9_6.3
Red Hat Enterprise Linux 9libsoup-debuginfo0:2.72.0-12.el9_7.1
Red Hat Enterprise Linux 9libsoup-debugsource0:2.72.0-12.el9_7.1
Red Hat Enterprise Linux 9libsoup-debugsource0:2.72.0-10.el9_6.3
Red Hat Enterprise Linux 9libsoup-devel0:2.72.0-10.el9_6.3
Red Hat Enterprise Linux 9libsoup-devel0:2.72.0-12.el9_7.1
Red Hat rhel aus 8.2libsoup0:2.62.3-1.el8_2.6
Red Hat rhel aus 8.2libsoup-debuginfo0:2.62.3-1.el8_2.6
Red Hat rhel aus 8.2libsoup-debugsource0:2.62.3-1.el8_2.6
Red Hat rhel aus 8.2libsoup-devel0:2.62.3-1.el8_2.6
Red Hat rhel aus 8.4libsoup0:2.62.3-2.el8_4.6
Red Hat rhel aus 8.4libsoup-debuginfo0:2.62.3-2.el8_4.6
Red Hat rhel aus 8.4libsoup-debugsource0:2.62.3-2.el8_4.6
Red Hat rhel aus 8.4libsoup-devel0:2.62.3-2.el8_4.6
Red Hat rhel aus 8.6libsoup0:2.62.3-2.el8_6.6
Red Hat rhel aus 8.6libsoup-debuginfo0:2.62.3-2.el8_6.6
Red Hat rhel aus 8.6libsoup-debugsource0:2.62.3-2.el8_6.6
Red Hat rhel aus 8.6libsoup-devel0:2.62.3-2.el8_6.6
Red Hat rhel e4s 8.6libsoup0:2.62.3-2.el8_6.6
Red Hat rhel e4s 8.6libsoup-debuginfo0:2.62.3-2.el8_6.6
Red Hat rhel e4s 8.6libsoup-debugsource0:2.62.3-2.el8_6.6
Red Hat rhel e4s 8.6libsoup-devel0:2.62.3-2.el8_6.6
Red Hat rhel e4s 8.8libsoup0:2.62.3-3.el8_8.6
Red Hat rhel e4s 8.8libsoup-debuginfo0:2.62.3-3.el8_8.6
Red Hat rhel e4s 8.8libsoup-debugsource0:2.62.3-3.el8_8.6
Red Hat rhel e4s 8.8libsoup-devel0:2.62.3-3.el8_8.6
Red Hat rhel e4s 9.0libsoup0:2.72.0-8.el9_0.6
Red Hat rhel e4s 9.0libsoup-debuginfo0:2.72.0-8.el9_0.6
Red Hat rhel e4s 9.0libsoup-debugsource0:2.72.0-8.el9_0.6
Red Hat rhel e4s 9.0libsoup-devel0:2.72.0-8.el9_0.6
Red Hat rhel e4s 9.2libsoup0:2.72.0-8.el9_2.6
Red Hat rhel e4s 9.2libsoup-debuginfo0:2.72.0-8.el9_2.6
Red Hat rhel e4s 9.2libsoup-debugsource0:2.72.0-8.el9_2.6
Red Hat rhel e4s 9.2libsoup-devel0:2.72.0-8.el9_2.6
Red Hat rhel els 7libsoup0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-debuginfo0:2.62.2-9.el7_9
Red Hat rhel els 7libsoup-devel0:2.62.2-9.el7_9
Red Hat rhel eus 9.4libsoup0:2.72.0-8.el9_4.6
Red Hat rhel eus 9.4libsoup-debuginfo0:2.72.0-8.el9_4.6
Red Hat rhel eus 9.4libsoup-debugsource0:2.72.0-8.el9_4.6
Red Hat rhel eus 9.4libsoup-devel0:2.72.0-8.el9_4.6
Red Hat rhel eus long life 8.4libsoup0:2.62.3-2.el8_4.6
Red Hat rhel eus long life 8.4libsoup-debuginfo0:2.62.3-2.el8_4.6
Red Hat rhel eus long life 8.4libsoup-debugsource0:2.62.3-2.el8_4.6
Red Hat rhel eus long life 8.4libsoup-devel0:2.62.3-2.el8_4.6
Red Hat rhel tus 8.6libsoup0:2.62.3-2.el8_6.6
Red Hat rhel tus 8.6libsoup-debuginfo0:2.62.3-2.el8_6.6
Red Hat rhel tus 8.6libsoup-debugsource0:2.62.3-2.el8_6.6
Red Hat rhel tus 8.6libsoup-devel0:2.62.3-2.el8_6.6
Rocky Linux 10libsoup30:3.6.5-3.el10_0.7
Rocky Linux 10libsoup30:3.6.5-3.el10_1.6
Rocky Linux 8libsoup0:2.62.3-10.el8_10
Rocky Linux 9libsoup0:2.72.0-10.el9_6.3
Rocky Linux 9libsoup0:2.72.0-12.el9_7.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libsoup3.4.4-150600.3.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libsoup3.4.4-150600.3.18.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise Server 16.0libsoup3.6.5-160000.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libsoup3.0.4-150400.3.18.1
SUSE Linux Enterprise Server for SAP applications 16.0libsoup3.6.5-160000.3.1
SUSE Linux Micro 6.0libsoup3.4.2-9.1
SUSE Linux Micro 6.1libsoup3.4.4-slfo.1.1_5.1
SUSE Linux Micro 6.2libsoup3.6.5-160000.3.1
SUSE Manager Proxy LTS 4.3libsoup3.0.4-150400.3.18.1
SUSE Manager Server LTS 4.3libsoup3.0.4-150400.3.18.1
Ubuntu 22.04 LTSlibsoup2.42.74.2-3ubuntu0.6
Ubuntu 24.04 LTSlibsoup2.42.74.3-6ubuntu1.6
Ubuntu 24.04 LTSlibsoup33.4.4-5ubuntu0.5
Ubuntu 25.10libsoup2.42.74.3-10.1ubuntu4
Ubuntu 25.10libsoup33.6.5-3
Ubuntu 26.04 LTSlibsoup2.42.74.3-10.1ubuntu4
Ubuntu Pro 16.04 LTSlibsoup2.42.52.2-1ubuntu0.3+esm5
Ubuntu Pro 18.04 LTSlibsoup2.42.62.1-1ubuntu0.4+esm6
Ubuntu Pro 20.04 LTSlibsoup2.42.70.0-1ubuntu0.5+esm1
Ubuntu Pro 22.04 LTSlibsoup33.0.7-0ubuntu1+esm5
openSUSE Leap 15.6libsoup3.4.4-150600.3.18.1
openSUSE Leap 16.0libsoup3.6.5-160000.3.1
openSUSE Tumbleweedlibsoup3.6.5-7.1