USN-7490-1 fixed vulnerabilities in libsoup2.4. This update provides the corresponding updates for libsoup3.
Original advisory details:
Tan Wei Chong discovered that libsoup incorrectly handled memory when parsing HTTP request headers. An attacker could possibly use this issue to send a maliciously crafted HTTP request to the server, causing a denial of service. (CVE-2025-32906)
Alon Zahavi discovered that libsoup incorrectly parsed video files. An attacker could possibly use this issue to send a maliciously crafted HTTP response back to the client, causing a denial of service, or leading to undefined behavior. (CVE-2025-32909)
Jan Różański discovered that libsoup incorrectly handled memory when parsing authentication headers. An attacker could possibly use this issue to send a maliciously crafted HTTP response back to the client, causing a denial of service. (CVE-2025-32910, CVE-2025-32912)
It was discovered that libsoup incorrectly handled data in the hash table data type. An attacker could possibly use this issue to send a maliciously crafted HTTP request to the server, causing a denial of service or remote code execution. (CVE-2025-32911)
Jan Różański discovered that libsoup incorrectly handled memory when parsing the content disposition HTTP header. An attacker could possibly use this issue to send maliciously crafted data to a client or server, causing a denial of service. (CVE-2025-32913)
Alon Zahavi discovered that libsoup incorrectly handled memory when parsing HTTP requests. An attacker could possibly use this issue to send a maliciously crafted HTTP request to the server, causing a denial of service or obtaining sensitive information. (CVE-2025-32914)
It was discovered that libsoup incorrectly handled memory when parsing quality-list headers. An attacker could possibly use this issue to send a maliciously crafted HTTP request to the server, causing a denial of service. (CVE-2025-46420)
Jan Różański discovered that libsoup did not strip authorization information upon redirects. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-46421)
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "gir1.2-soup-3.0" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-0" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-0-dbgsym" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-common" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-dev" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-doc" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-tests" }, { "binary_version": "3.0.7-0ubuntu1+esm3", "binary_name": "libsoup-3.0-tests-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "gir1.2-soup-3.0" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-0" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-0-dbgsym" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-common" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-dev" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-doc" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-tests" }, { "binary_version": "3.6.0-2ubuntu0.3", "binary_name": "libsoup-3.0-tests-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "gir1.2-soup-3.0" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-0" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-0-dbgsym" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-common" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-dev" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-doc" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-tests" }, { "binary_version": "3.4.4-5ubuntu0.3", "binary_name": "libsoup-3.0-tests-dbgsym" } ] }