Red Hat Product Errata RHSA-2025:19713 - Security Advisory
Issued:
2025-11-04
Updated:
2025-11-04

RHSA-2025:19713 - Security Advisory

Synopsis

Important: libsoup security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libsoup is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

  • libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup (CVE-2025-4945)
  • libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library (CVE-2025-11021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

  • BZ - 2367175 - CVE-2025-4945 libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup
  • BZ - 2399627 - CVE-2025-11021 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library

Red Hat Enterprise Linux for x86_64 9

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
x86_64
libsoup-2.72.0-10.el9_6.3.i686.rpm SHA-256: 6e983ec4bbf84290a1b171058836175dc5328dbe46a52f3f120b6e82fea25c04
libsoup-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 6f0c42f7474934ef8b1b18a15cd1cf4d1c50a18953971d10eb619b951791252c
libsoup-debuginfo-2.72.0-10.el9_6.3.i686.rpm SHA-256: 048ba414c1ba1b81100175412ca1f51747b9149a60688697341a621f7d0c19b0
libsoup-debuginfo-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: de39a1cb4493920440ee10c158e9bbb2cf25f256a9a39bc8771ea95e3e510a43
libsoup-debugsource-2.72.0-10.el9_6.3.i686.rpm SHA-256: 81711894e2720b3fbb442a836981cfdee56456896227ed17534ffa86d6f54987
libsoup-debugsource-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 4531a9154642ca460970f1454840cde05655d6860209673cf2298152d020020d
libsoup-devel-2.72.0-10.el9_6.3.i686.rpm SHA-256: 544d2ba557a7caf0b802bd6468f44314c3b28e4632d726ca26e88f8b7808f5bb
libsoup-devel-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 5aed62f3d894b2be67c4f0e1af500573e72424fb73c929603a1a47ff5e16ceb3

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
x86_64
libsoup-2.72.0-10.el9_6.3.i686.rpm SHA-256: 6e983ec4bbf84290a1b171058836175dc5328dbe46a52f3f120b6e82fea25c04
libsoup-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 6f0c42f7474934ef8b1b18a15cd1cf4d1c50a18953971d10eb619b951791252c
libsoup-debuginfo-2.72.0-10.el9_6.3.i686.rpm SHA-256: 048ba414c1ba1b81100175412ca1f51747b9149a60688697341a621f7d0c19b0
libsoup-debuginfo-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: de39a1cb4493920440ee10c158e9bbb2cf25f256a9a39bc8771ea95e3e510a43
libsoup-debugsource-2.72.0-10.el9_6.3.i686.rpm SHA-256: 81711894e2720b3fbb442a836981cfdee56456896227ed17534ffa86d6f54987
libsoup-debugsource-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 4531a9154642ca460970f1454840cde05655d6860209673cf2298152d020020d
libsoup-devel-2.72.0-10.el9_6.3.i686.rpm SHA-256: 544d2ba557a7caf0b802bd6468f44314c3b28e4632d726ca26e88f8b7808f5bb
libsoup-devel-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 5aed62f3d894b2be67c4f0e1af500573e72424fb73c929603a1a47ff5e16ceb3

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
x86_64
libsoup-2.72.0-10.el9_6.3.i686.rpm SHA-256: 6e983ec4bbf84290a1b171058836175dc5328dbe46a52f3f120b6e82fea25c04
libsoup-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 6f0c42f7474934ef8b1b18a15cd1cf4d1c50a18953971d10eb619b951791252c
libsoup-debuginfo-2.72.0-10.el9_6.3.i686.rpm SHA-256: 048ba414c1ba1b81100175412ca1f51747b9149a60688697341a621f7d0c19b0
libsoup-debuginfo-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: de39a1cb4493920440ee10c158e9bbb2cf25f256a9a39bc8771ea95e3e510a43
libsoup-debugsource-2.72.0-10.el9_6.3.i686.rpm SHA-256: 81711894e2720b3fbb442a836981cfdee56456896227ed17534ffa86d6f54987
libsoup-debugsource-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 4531a9154642ca460970f1454840cde05655d6860209673cf2298152d020020d
libsoup-devel-2.72.0-10.el9_6.3.i686.rpm SHA-256: 544d2ba557a7caf0b802bd6468f44314c3b28e4632d726ca26e88f8b7808f5bb
libsoup-devel-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 5aed62f3d894b2be67c4f0e1af500573e72424fb73c929603a1a47ff5e16ceb3

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
s390x
libsoup-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 50f2947d0d3fe43fa8b40b71c6262947b7bd38177437546e936264757d434035
libsoup-debuginfo-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 2b158f3119457d24e7a531dd9f924411012bbf4d64ac19bd497d2e85e11cd21d
libsoup-debugsource-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 8a9b7a30a79065cf71cb05199904790def8b5098394aa0d3840672208e835c2c
libsoup-devel-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 9f2801c10896aaba5775c92f1061bd37cdab7ab8c7005cf9f02e5af22f2defd4

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
s390x
libsoup-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 50f2947d0d3fe43fa8b40b71c6262947b7bd38177437546e936264757d434035
libsoup-debuginfo-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 2b158f3119457d24e7a531dd9f924411012bbf4d64ac19bd497d2e85e11cd21d
libsoup-debugsource-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 8a9b7a30a79065cf71cb05199904790def8b5098394aa0d3840672208e835c2c
libsoup-devel-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 9f2801c10896aaba5775c92f1061bd37cdab7ab8c7005cf9f02e5af22f2defd4

Red Hat Enterprise Linux for Power, little endian 9

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
ppc64le
libsoup-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 27d379d426bb3e0c25efbe1c12904ab86136793b29900460cde64d382323ccc3
libsoup-debuginfo-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 4a88bec2ff92571ef014f5bfafbc4de5056c836e3e18e7844bd97ab0020174ba
libsoup-debugsource-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 73a6c324ff39b65f99227761b2730209418e3503ce87d3524e709bba80c5ef38
libsoup-devel-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 2abde123d50adb3666cb2e0ae408f27b3109fe07d4fa6a50ab8f921eaa8b3be3

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
ppc64le
libsoup-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 27d379d426bb3e0c25efbe1c12904ab86136793b29900460cde64d382323ccc3
libsoup-debuginfo-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 4a88bec2ff92571ef014f5bfafbc4de5056c836e3e18e7844bd97ab0020174ba
libsoup-debugsource-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 73a6c324ff39b65f99227761b2730209418e3503ce87d3524e709bba80c5ef38
libsoup-devel-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 2abde123d50adb3666cb2e0ae408f27b3109fe07d4fa6a50ab8f921eaa8b3be3

Red Hat Enterprise Linux for ARM 64 9

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
aarch64
libsoup-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: b02e5a27246d6e38ec1d1da5023d23112f610910854c2743579b90f5563ba1e8
libsoup-debuginfo-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 563ddba48efd6c1a86a7918bdf6f5453b829cf8e5bcb5185f344e0df7d373e52
libsoup-debugsource-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 188a734a9d881ea229038a25cefb8d84567555332e812d1c3e530666b1072d2c
libsoup-devel-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 1a9f0e2e00748ab04dea24781ad972eca31a8c91fbccfa2dfa8e094adf1d2507

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
aarch64
libsoup-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: b02e5a27246d6e38ec1d1da5023d23112f610910854c2743579b90f5563ba1e8
libsoup-debuginfo-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 563ddba48efd6c1a86a7918bdf6f5453b829cf8e5bcb5185f344e0df7d373e52
libsoup-debugsource-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 188a734a9d881ea229038a25cefb8d84567555332e812d1c3e530666b1072d2c
libsoup-devel-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 1a9f0e2e00748ab04dea24781ad972eca31a8c91fbccfa2dfa8e094adf1d2507

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
ppc64le
libsoup-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 27d379d426bb3e0c25efbe1c12904ab86136793b29900460cde64d382323ccc3
libsoup-debuginfo-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 4a88bec2ff92571ef014f5bfafbc4de5056c836e3e18e7844bd97ab0020174ba
libsoup-debugsource-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 73a6c324ff39b65f99227761b2730209418e3503ce87d3524e709bba80c5ef38
libsoup-devel-2.72.0-10.el9_6.3.ppc64le.rpm SHA-256: 2abde123d50adb3666cb2e0ae408f27b3109fe07d4fa6a50ab8f921eaa8b3be3

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
x86_64
libsoup-2.72.0-10.el9_6.3.i686.rpm SHA-256: 6e983ec4bbf84290a1b171058836175dc5328dbe46a52f3f120b6e82fea25c04
libsoup-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 6f0c42f7474934ef8b1b18a15cd1cf4d1c50a18953971d10eb619b951791252c
libsoup-debuginfo-2.72.0-10.el9_6.3.i686.rpm SHA-256: 048ba414c1ba1b81100175412ca1f51747b9149a60688697341a621f7d0c19b0
libsoup-debuginfo-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: de39a1cb4493920440ee10c158e9bbb2cf25f256a9a39bc8771ea95e3e510a43
libsoup-debugsource-2.72.0-10.el9_6.3.i686.rpm SHA-256: 81711894e2720b3fbb442a836981cfdee56456896227ed17534ffa86d6f54987
libsoup-debugsource-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 4531a9154642ca460970f1454840cde05655d6860209673cf2298152d020020d
libsoup-devel-2.72.0-10.el9_6.3.i686.rpm SHA-256: 544d2ba557a7caf0b802bd6468f44314c3b28e4632d726ca26e88f8b7808f5bb
libsoup-devel-2.72.0-10.el9_6.3.x86_64.rpm SHA-256: 5aed62f3d894b2be67c4f0e1af500573e72424fb73c929603a1a47ff5e16ceb3

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
aarch64
libsoup-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: b02e5a27246d6e38ec1d1da5023d23112f610910854c2743579b90f5563ba1e8
libsoup-debuginfo-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 563ddba48efd6c1a86a7918bdf6f5453b829cf8e5bcb5185f344e0df7d373e52
libsoup-debugsource-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 188a734a9d881ea229038a25cefb8d84567555332e812d1c3e530666b1072d2c
libsoup-devel-2.72.0-10.el9_6.3.aarch64.rpm SHA-256: 1a9f0e2e00748ab04dea24781ad972eca31a8c91fbccfa2dfa8e094adf1d2507

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
libsoup-2.72.0-10.el9_6.3.src.rpm SHA-256: 1ae78fad17238d7da33824d13db97dc73d04a8e1fc1eca788911aee90e1ab1a0
s390x
libsoup-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 50f2947d0d3fe43fa8b40b71c6262947b7bd38177437546e936264757d434035
libsoup-debuginfo-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 2b158f3119457d24e7a531dd9f924411012bbf4d64ac19bd497d2e85e11cd21d
libsoup-debugsource-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 8a9b7a30a79065cf71cb05199904790def8b5098394aa0d3840672208e835c2c
libsoup-devel-2.72.0-10.el9_6.3.s390x.rpm SHA-256: 9f2801c10896aaba5775c92f1061bd37cdab7ab8c7005cf9f02e5af22f2defd4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.