{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12105.json"}],"title":"libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion","tracking":{"current_release_date":"2026-06-30T03:04:50+00:00","generator":{"date":"2026-06-30T03:04:50+00:00","engine":{"name":"Red Hat SDEngine","version":"5.3.0"}},"id":"CVE-2025-12105","initial_release_date":"2025-10-23T00:00:00+00:00","revision_history":[{"date":"2025-10-23T00:00:00+00:00","number":"1","summary":"Initial version"},{"date":"2026-03-16T08:31:17+00:00","number":"2","summary":"Current version"},{"date":"2026-06-30T03:04:50+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 6","product":{"name":"Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:6"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 6"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 7","product":{"name":"Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:7"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 7"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 8","product":{"name":"Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:8"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 8"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 9","product":{"name":"Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:9"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 9"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product":{"name":"Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux_eus:10.0"}}},{"category":"product_name","name":"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)","product":{"name":"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)","product_id":"CRB-10.0.Z.E2S","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux_eus:10.0"}}},{"category":"product_name","name":"Red Hat Enterprise Linux AppStream (v. 10)","product":{"name":"Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:10.1"}}},{"category":"product_name","name":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","product":{"name":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","product_id":"CRB-10.1.Z","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:10.1"}}}],"category":"product_family","name":"Red Hat Enterprise Linux"},{"category":"product_version","name":"libsoup","product":{"name":"libsoup","product_id":"libsoup","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup"}}},{"category":"product_version","name":"libsoup.src","product":{"name":"libsoup.src","product_id":"libsoup.src","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup?arch=src"}}},{"category":"product_version","name":"libsoup-devel","product":{"name":"libsoup-devel","product_id":"libsoup-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup-devel"}}},{"branches":[{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_0.10.src","product":{"name":"libsoup3-0:3.6.5-3.el10_0.10.src","product_id":"libsoup3-0:3.6.5-3.el10_0.10.src","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0.10?arch=src"}}},{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_1.7.src","product":{"name":"libsoup3-0:3.6.5-3.el10_1.7.src","product_id":"libsoup3-0:3.6.5-3.el10_1.7.src","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_1.7?arch=src"}}}],"category":"architecture","name":"src"},{"branches":[{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_0.10.aarch64","product":{"name":"libsoup3-0:3.6.5-3.el10_0.10.aarch64","product_id":"libsoup3-0:3.6.5-3.el10_0.10.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0.10?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","product_id":"libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_0.10?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_0.10?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_0.10?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_1.7.aarch64","product":{"name":"libsoup3-0:3.6.5-3.el10_1.7.aarch64","product_id":"libsoup3-0:3.6.5-3.el10_1.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_1.7?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","product_id":"libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_1.7?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_1.7?arch=aarch64"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_1.7?arch=aarch64"}}}],"category":"architecture","name":"aarch64"},{"branches":[{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_0.10.ppc64le","product":{"name":"libsoup3-0:3.6.5-3.el10_0.10.ppc64le","product_id":"libsoup3-0:3.6.5-3.el10_0.10.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0.10?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","product_id":"libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_0.10?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_0.10?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_0.10?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_1.7.ppc64le","product":{"name":"libsoup3-0:3.6.5-3.el10_1.7.ppc64le","product_id":"libsoup3-0:3.6.5-3.el10_1.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_1.7?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","product_id":"libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_1.7?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_1.7?arch=ppc64le"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_1.7?arch=ppc64le"}}}],"category":"architecture","name":"ppc64le"},{"branches":[{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_0.10.s390x","product":{"name":"libsoup3-0:3.6.5-3.el10_0.10.s390x","product_id":"libsoup3-0:3.6.5-3.el10_0.10.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0.10?arch=s390x"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","product_id":"libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_0.10?arch=s390x"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_0.10?arch=s390x"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_0.10?arch=s390x"}}},{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_1.7.s390x","product":{"name":"libsoup3-0:3.6.5-3.el10_1.7.s390x","product_id":"libsoup3-0:3.6.5-3.el10_1.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_1.7?arch=s390x"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","product_id":"libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_1.7?arch=s390x"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_1.7?arch=s390x"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_1.7?arch=s390x"}}}],"category":"architecture","name":"s390x"},{"branches":[{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_0.10.x86_64","product":{"name":"libsoup3-0:3.6.5-3.el10_0.10.x86_64","product_id":"libsoup3-0:3.6.5-3.el10_0.10.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_0.10?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","product_id":"libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_0.10?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_0.10?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_0.10?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-0:3.6.5-3.el10_1.7.x86_64","product":{"name":"libsoup3-0:3.6.5-3.el10_1.7.x86_64","product_id":"libsoup3-0:3.6.5-3.el10_1.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3@3.6.5-3.el10_1.7?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","product":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","product_id":"libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-devel@3.6.5-3.el10_1.7?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","product":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","product_id":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debugsource@3.6.5-3.el10_1.7?arch=x86_64"}}},{"category":"product_version","name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","product":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","product_id":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-debuginfo@3.6.5-3.el10_1.7?arch=x86_64"}}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_version","name":"libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","product":{"name":"libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","product_id":"libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-doc@3.6.5-3.el10_0.10?arch=noarch"}}},{"category":"product_version","name":"libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","product":{"name":"libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","product_id":"libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/libsoup3-doc@3.6.5-3.el10_1.7?arch=noarch"}}}],"category":"architecture","name":"noarch"}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.aarch64"},"product_reference":"libsoup3-0:3.6.5-3.el10_0.10.aarch64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_0.10.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.ppc64le"},"product_reference":"libsoup3-0:3.6.5-3.el10_0.10.ppc64le","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_0.10.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.s390x"},"product_reference":"libsoup3-0:3.6.5-3.el10_0.10.s390x","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_0.10.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.src"},"product_reference":"libsoup3-0:3.6.5-3.el10_0.10.src","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_0.10.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.x86_64"},"product_reference":"libsoup3-0:3.6.5-3.el10_0.10.x86_64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.s390x"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","product_id":"AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","relates_to_product_reference":"AppStream-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_1.7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.aarch64"},"product_reference":"libsoup3-0:3.6.5-3.el10_1.7.aarch64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_1.7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.ppc64le"},"product_reference":"libsoup3-0:3.6.5-3.el10_1.7.ppc64le","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_1.7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.s390x"},"product_reference":"libsoup3-0:3.6.5-3.el10_1.7.s390x","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_1.7.src as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.src"},"product_reference":"libsoup3-0:3.6.5-3.el10_1.7.src","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-0:3.6.5-3.el10_1.7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.x86_64"},"product_reference":"libsoup3-0:3.6.5-3.el10_1.7.x86_64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64"},"product_reference":"libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64"},"product_reference":"libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.s390x"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64"},"product_reference":"libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","relates_to_product_reference":"AppStream-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-doc-0:3.6.5-3.el10_0.10.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)","product_id":"CRB-10.0.Z.E2S:libsoup3-doc-0:3.6.5-3.el10_0.10.noarch"},"product_reference":"libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","relates_to_product_reference":"CRB-10.0.Z.E2S"},{"category":"default_component_of","full_product_name":{"name":"libsoup3-doc-0:3.6.5-3.el10_1.7.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","product_id":"CRB-10.1.Z:libsoup3-doc-0:3.6.5-3.el10_1.7.noarch"},"product_reference":"libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","relates_to_product_reference":"CRB-10.1.Z"},{"category":"default_component_of","full_product_name":{"name":"libsoup as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:libsoup"},"product_reference":"libsoup","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"libsoup-devel as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:libsoup-devel"},"product_reference":"libsoup-devel","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"libsoup.src as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:libsoup.src"},"product_reference":"libsoup.src","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"libsoup as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:libsoup"},"product_reference":"libsoup","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"libsoup-devel as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:libsoup-devel"},"product_reference":"libsoup-devel","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"libsoup.src as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:libsoup.src"},"product_reference":"libsoup.src","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"libsoup as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:libsoup"},"product_reference":"libsoup","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"libsoup-devel as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:libsoup-devel"},"product_reference":"libsoup-devel","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"libsoup.src as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:libsoup.src"},"product_reference":"libsoup.src","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"libsoup as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:libsoup"},"product_reference":"libsoup","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"libsoup-devel as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:libsoup-devel"},"product_reference":"libsoup-devel","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"libsoup.src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:libsoup.src"},"product_reference":"libsoup.src","relates_to_product_reference":"red_hat_enterprise_linux_9"}]},"vulnerabilities":[{"acknowledgments":[{"names":["Eugene Mutavchi"]}],"cve":"CVE-2025-12105","cwe":{"id":"CWE-416","name":"Use After Free"},"discovery_date":"2025-10-23T08:20:47.896000+00:00","flags":[{"label":"vulnerable_code_not_present","product_ids":["red_hat_enterprise_linux_7:libsoup","red_hat_enterprise_linux_7:libsoup-devel","red_hat_enterprise_linux_7:libsoup.src","red_hat_enterprise_linux_8:libsoup","red_hat_enterprise_linux_8:libsoup-devel","red_hat_enterprise_linux_8:libsoup.src","red_hat_enterprise_linux_9:libsoup","red_hat_enterprise_linux_9:libsoup-devel","red_hat_enterprise_linux_9:libsoup.src"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"2405992"}],"notes":[{"category":"description","text":"A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.","title":"Vulnerability description"},{"category":"summary","text":"libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion","title":"Vulnerability summary"},{"category":"other","text":"The Red Hat Product Security team has assessed the severity of this vulnerability as High, as it can be triggered remotely without authentication or user interaction, leading to the crash of applications or network services relying on libsoup for HTTP/2 processing. While there is no evidence of code execution or system compromise, the flaw results in a complete denial-of-service of affected processes, which can disrupt service availability in production environments.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"fixed":["AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.src","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.src","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","CRB-10.0.Z.E2S:libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","CRB-10.1.Z:libsoup3-doc-0:3.6.5-3.el10_1.7.noarch"],"known_affected":["red_hat_enterprise_linux_6:libsoup","red_hat_enterprise_linux_6:libsoup-devel","red_hat_enterprise_linux_6:libsoup.src"],"known_not_affected":["red_hat_enterprise_linux_7:libsoup","red_hat_enterprise_linux_7:libsoup-devel","red_hat_enterprise_linux_7:libsoup.src","red_hat_enterprise_linux_8:libsoup","red_hat_enterprise_linux_8:libsoup-devel","red_hat_enterprise_linux_8:libsoup.src","red_hat_enterprise_linux_9:libsoup","red_hat_enterprise_linux_9:libsoup-devel","red_hat_enterprise_linux_9:libsoup.src"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2025-12105"},{"category":"external","summary":"RHBZ#2405992","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405992"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2025-12105","url":"https://www.cve.org/CVERecord?id=CVE-2025-12105"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2025-12105","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12105"},{"category":"external","summary":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/481","url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/481"}],"release_date":"2025-10-23T00:00:00+00:00","remediations":[{"category":"vendor_fix","date":"2025-12-17T07:32:46+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.src","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","CRB-10.0.Z.E2S:libsoup3-doc-0:3.6.5-3.el10_0.10.noarch"],"url":"https://access.redhat.com/errata/RHSA-2025:23437"},{"category":"vendor_fix","date":"2025-12-11T17:48:16+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.src","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","CRB-10.1.Z:libsoup3-doc-0:3.6.5-3.el10_1.7.noarch"],"url":"https://access.redhat.com/errata/RHSA-2025:23139"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability.","product_ids":["AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.src","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.src","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","CRB-10.0.Z.E2S:libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","CRB-10.1.Z:libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","red_hat_enterprise_linux_6:libsoup","red_hat_enterprise_linux_6:libsoup-devel","red_hat_enterprise_linux_6:libsoup.src"]},{"category":"no_fix_planned","details":"Out of support scope","product_ids":["red_hat_enterprise_linux_6:libsoup","red_hat_enterprise_linux_6:libsoup-devel","red_hat_enterprise_linux_6:libsoup.src"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.src","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.src","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","CRB-10.0.Z.E2S:libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","CRB-10.1.Z:libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","red_hat_enterprise_linux_6:libsoup","red_hat_enterprise_linux_6:libsoup-devel","red_hat_enterprise_linux_6:libsoup.src","red_hat_enterprise_linux_7:libsoup","red_hat_enterprise_linux_7:libsoup-devel","red_hat_enterprise_linux_7:libsoup.src","red_hat_enterprise_linux_8:libsoup","red_hat_enterprise_linux_8:libsoup-devel","red_hat_enterprise_linux_8:libsoup.src","red_hat_enterprise_linux_9:libsoup","red_hat_enterprise_linux_9:libsoup-devel","red_hat_enterprise_linux_9:libsoup.src"]}],"threats":[{"category":"impact","details":"Moderate","product_ids":["AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.src","AppStream-10.0.Z.E2S:libsoup3-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debuginfo-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-debugsource-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.aarch64","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.ppc64le","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.s390x","AppStream-10.0.Z.E2S:libsoup3-devel-0:3.6.5-3.el10_0.10.x86_64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.src","AppStream-10.1.Z:libsoup3-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debuginfo-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-debugsource-0:3.6.5-3.el10_1.7.x86_64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.aarch64","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.ppc64le","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.s390x","AppStream-10.1.Z:libsoup3-devel-0:3.6.5-3.el10_1.7.x86_64","CRB-10.0.Z.E2S:libsoup3-doc-0:3.6.5-3.el10_0.10.noarch","CRB-10.1.Z:libsoup3-doc-0:3.6.5-3.el10_1.7.noarch","red_hat_enterprise_linux_6:libsoup","red_hat_enterprise_linux_6:libsoup-devel","red_hat_enterprise_linux_6:libsoup.src","red_hat_enterprise_linux_7:libsoup","red_hat_enterprise_linux_7:libsoup-devel","red_hat_enterprise_linux_7:libsoup.src","red_hat_enterprise_linux_8:libsoup","red_hat_enterprise_linux_8:libsoup-devel","red_hat_enterprise_linux_8:libsoup.src","red_hat_enterprise_linux_9:libsoup","red_hat_enterprise_linux_9:libsoup-devel","red_hat_enterprise_linux_9:libsoup.src"]}],"title":"libsoup: Heap Use-After-Free in libsoup message queue handling during HTTP/2 read completion"}]}