ELSA-2025-19720

ELSA-2025-19720 - libsoup3 security update

Type:	SECURITY
Impact:	LOW
Release Date:	2025-11-04

Description

[3.6.5-9]
- Revert 'Fix handling of invalid dates in cookie expires attribute
(CVE-2025-11021)'

[3.6.5-8]
- Fix integer overflow in date/time parsing

[3.6.5-7]
- Fix handling of invalid dates in cookie expires attribute
(CVE-2025-11021)

[3.6.5-6]
- Add patch for CVE-2025-32907

[3.6.5-5]
- Fix release field

[3.6.5-4]
- Fix several CVEs

Related CVEs

CVE-2025-4945

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	libsoup3-3.6.5-3.el10_0.9.src.rpm	b8de1c12fae058b23d9e2f665aca4f3df3e87d806f3162b6c9f5a062a90af522	-	ol10_aarch64_appstream
	libsoup3-3.6.5-3.el10_0.9.src.rpm	b8de1c12fae058b23d9e2f665aca4f3df3e87d806f3162b6c9f5a062a90af522	-	ol10_aarch64_codeready_builder
	libsoup3-3.6.5-3.el10_0.9.aarch64.rpm	b54ac619d58b73f703c8bfdb73071705a5040bba3c16e9c5735c6a4d43176920	-	ol10_aarch64_appstream
	libsoup3-devel-3.6.5-3.el10_0.9.aarch64.rpm	1d43b00c7e98ca47e4fc43c3240fefb1240adf94d7dd5e7a37428fd9402a675b	-	ol10_aarch64_appstream
	libsoup3-doc-3.6.5-3.el10_0.9.noarch.rpm	f69515604db7c9acbaf811c950fc0d2f3c2ac67ee6206564f68305954be8ac8c	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	libsoup3-3.6.5-3.el10_0.9.src.rpm	b8de1c12fae058b23d9e2f665aca4f3df3e87d806f3162b6c9f5a062a90af522	-	ol10_x86_64_appstream
	libsoup3-3.6.5-3.el10_0.9.src.rpm	b8de1c12fae058b23d9e2f665aca4f3df3e87d806f3162b6c9f5a062a90af522	-	ol10_x86_64_codeready_builder
	libsoup3-3.6.5-3.el10_0.9.x86_64.rpm	8f8663c14ac8105df31f2c07d3cf2a15a91c12b8c468c59753ec7de17df6c1f8	-	ol10_x86_64_appstream
	libsoup3-devel-3.6.5-3.el10_0.9.x86_64.rpm	40bee60940d859992ccf64b0d8b01cb523c8c9932b8fb3bde6691cb8dee9724d	-	ol10_x86_64_appstream
	libsoup3-doc-3.6.5-3.el10_0.9.noarch.rpm	f69515604db7c9acbaf811c950fc0d2f3c2ac67ee6206564f68305954be8ac8c	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team