libsoup regression
USN-8890-1 fixed vulnerabilities in libsoup. Unfortunately, that update introduced a memory leak in the cookie jar and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-4271) It was discovered that libsoup incorrectly handled certain HTTPS proxy connections. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LT
Read at Ubuntu Security Notices
- Vendor
- Canonical
Why it ranks 29 (Notable)
- Covered by 2 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-4271 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-5119 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-6324 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-66339 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-77014 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.