Back Linuxsecurity Ubuntu 25.10 libsoup3 Important Denial of Service Threat USN-8020
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in libsoup. Software Description: - libsoup3: HTTP client/server library for GNOME Details: It was discovered that libsoup did not correctly handle certain URL-decoded input, which could allow for HTTP header injection. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-1467, CVE-2026-1536) It was discovered that libsoup did not correctly handle removal of the Proxy-Authorization header. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-1539)
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in libsoup. Software Description: - libsoup3: HTTP client/server library for GNOME Details: It was discovered that libsoup did not correctly handle certain URL-decoded input, which could allow for HTTP header injection. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-1467, CVE-2026-1536) It was discovered that libsoup did not correctly handle removal of the Proxy-Authorization header. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-1539)
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 gir1.2-soup-3.0 3.6.5-4ubuntu0.2 libsoup-3.0-0 3.6.5-4ubuntu0.2 libsoup-3.0-common 3.6.5-4ubuntu0.2 libsoup-3.0-dev 3.6.5-4ubuntu0.2 libsoup-3.0-doc 3.6.5-4ubuntu0.2 libsoup-3.0-tests 3.6.5-4ubuntu0.2 Ubuntu 24.04 LTS gir1.2-soup-3.0 3.4.4-5ubuntu0.7 libsoup-3.0-0 3.4.4-5ubuntu0.7 libsoup-3.0-common 3.4.4-5ubuntu0.7 libsoup-3.0-dev 3.4.4-5ubuntu0.7 libsoup-3.0-doc 3.4.4-5ubuntu0.7 libsoup-3.0-tests 3.4.4-5ubuntu0.7 Ubuntu 22.04 LTS gir1.2-soup-3.0 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-0 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-common 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-dev 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-doc 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-tests 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 gir1.2-soup-3.0 3.6.5-4ubuntu0.2 libsoup-3.0-0 3.6.5-4ubuntu0.2 libsoup-3.0-common 3.6.5-4ubuntu0.2 libsoup-3.0-dev 3.6.5-4ubuntu0.2 libsoup-3.0-doc 3.6.5-4ubuntu0.2 libsoup-3.0-tests 3.6.5-4ubuntu0.2 Ubuntu 24.04 LTS gir1.2-soup-3.0 3.4.4-5ubuntu0.7 libsoup-3.0-0 3.4.4-5ubuntu0.7 libsoup-3.0-common 3.4.4-5ubuntu0.7 libsoup-3.0-dev 3.4.4-5ubuntu0.7 libsoup-3.0-doc 3.4.4-5ubuntu0.7 libsoup-3.0-tests 3.4.4-5ubuntu0.7 Ubuntu 22.04 LTS gir1.2-soup-3.0 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-0 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-common 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-dev 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-doc 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro libsoup-3.0-tests 3.0.7-0ubuntu1+esm7 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
