CLSA-2026-1791791913

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791791913
Upstream
  • CVE-2026-5119
Published
2026-10-12T07:58:43Z
Modified
2026-10-26T09:32:04Z
Summary
Fix CVE(s): CVE-2026-5119
Details
  • SECURITY UPDATE: secure cookies sent in cleartext to HTTP proxy in CONNECT requests
    • debian/patches/CVE-2026-5119.patch: don't add cookies to a CONNECT request for a tunnelled HTTPS connection in msg_starting_cb() in libsoup/soup-cookie-jar.c
    • CVE-2026-5119
  • debian/patches/fix-tests-AuthDigestQop-none.patch: remove "AuthDigestQop none" from the /Digest/realm3 location and use a file-based accept mutex in tests/httpd.conf.in, so the test server starts with the updated apache2 (which accepts only qop=auth) and when the build runs as root
References

Affected packages

TuxCare:Ubuntu:18.04
gir1.2-soup-2.4

Package

Name
gir1.2-soup-2.4
Purl
pkg:deb/tuxcare/gir1.2-soup-2.4?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.62.1-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json"
libsoup-gnome2.4-1

Package

Name
libsoup-gnome2.4-1
Purl
pkg:deb/tuxcare/libsoup-gnome2.4-1?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.62.1-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json"
libsoup-gnome2.4-dev

Package

Name
libsoup-gnome2.4-dev
Purl
pkg:deb/tuxcare/libsoup-gnome2.4-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.62.1-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json"
libsoup2.4-1

Package

Name
libsoup2.4-1
Purl
pkg:deb/tuxcare/libsoup2.4-1?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.62.1-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json"
libsoup2.4-dev

Package

Name
libsoup2.4-dev
Purl
pkg:deb/tuxcare/libsoup2.4-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.62.1-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json"
libsoup2.4-doc

Package

Name
libsoup2.4-doc
Purl
pkg:deb/tuxcare/libsoup2.4-doc?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.62.1-1ubuntu0.4+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791791913.json"