Red Hat Product Errata RHSA-2026:22317 - Security Advisory
Issued:
2026-06-01
Updated:
2026-06-01

RHSA-2026:22317 - Security Advisory

Synopsis

Moderate: libsoup security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libsoup is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

  • libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2452932 - CVE-2026-5119 libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
x86_64
libsoup-2.72.0-10.el9_6.7.i686.rpm SHA-256: 27bae15de889235181c6a5cca7bb59f13f8d75a12f95150567c8c1633f8e2944
libsoup-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 8739607467869809fce75dc8a6c1b76a8bdd2cccba37ad08fdd95cb268df7a1f
libsoup-debuginfo-2.72.0-10.el9_6.7.i686.rpm SHA-256: 81ad46795691098d99694adaaef58df0812250ce9a02d9c76fdf61f6dcfcc1e9
libsoup-debuginfo-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 12682d69e8fa1fd73d8bc363b76eba03e1239a804fab3082166a3394681dcaee
libsoup-debugsource-2.72.0-10.el9_6.7.i686.rpm SHA-256: d5047f0affc4dd33ac7f22969dc4059d67f7e7fb2b1c465c472352b77c739194
libsoup-debugsource-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 1639054e6e11de0f23f2cb153aa942548fb43e105e74030503c54890d267a22c
libsoup-devel-2.72.0-10.el9_6.7.i686.rpm SHA-256: 412d5b3e91d27eb2341ba08b09c5b3bb425f3114b85337ebdb1ad4cf19025907
libsoup-devel-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: c0fd251b17828049c1dc26f51e8a1840cfc3faf81718121b7954bffba46a5f5b

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
x86_64
libsoup-2.72.0-10.el9_6.7.i686.rpm SHA-256: 27bae15de889235181c6a5cca7bb59f13f8d75a12f95150567c8c1633f8e2944
libsoup-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 8739607467869809fce75dc8a6c1b76a8bdd2cccba37ad08fdd95cb268df7a1f
libsoup-debuginfo-2.72.0-10.el9_6.7.i686.rpm SHA-256: 81ad46795691098d99694adaaef58df0812250ce9a02d9c76fdf61f6dcfcc1e9
libsoup-debuginfo-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 12682d69e8fa1fd73d8bc363b76eba03e1239a804fab3082166a3394681dcaee
libsoup-debugsource-2.72.0-10.el9_6.7.i686.rpm SHA-256: d5047f0affc4dd33ac7f22969dc4059d67f7e7fb2b1c465c472352b77c739194
libsoup-debugsource-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 1639054e6e11de0f23f2cb153aa942548fb43e105e74030503c54890d267a22c
libsoup-devel-2.72.0-10.el9_6.7.i686.rpm SHA-256: 412d5b3e91d27eb2341ba08b09c5b3bb425f3114b85337ebdb1ad4cf19025907
libsoup-devel-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: c0fd251b17828049c1dc26f51e8a1840cfc3faf81718121b7954bffba46a5f5b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
s390x
libsoup-2.72.0-10.el9_6.7.s390x.rpm SHA-256: b4dafe62fc048aed9bf52604fa994f310f3b4de3b7232866f132a1540d41f343
libsoup-debuginfo-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 8ba079687f52f476adcf00858bd39c86c3b9ab956cdac1ce11265e4ed2c9ceaf
libsoup-debugsource-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 7e6d7989ad8cef6c60c80db575f1f9747b3ae7354cb0b900e3528bc375da4b05
libsoup-devel-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 8bf8cf2084323657b653da0c8f3a6c00970e1117a180a85464b83de5c8e46788

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
ppc64le
libsoup-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 229620e88e536bdd9effdcaaf63133f88c38cc5639118f5548b62f671eb5d629
libsoup-debuginfo-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: ac8efcef49afa1b67b8df1311c324e6e7bf6e1dddd1e25ffe4181ca51aba37db
libsoup-debugsource-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 6b0f5753938153d04fc66d1d0c2b2051d55cbcaad4ceb4bf7a78ca75c4c279b4
libsoup-devel-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 4db2916d4079c98a8cd18fa6b07f71c0d4c7570003e686b7089b353d357345ef

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
aarch64
libsoup-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: fb6a22a1cefd96daea96bf544413c3f85f456b46604c129f8032de0516db6ee2
libsoup-debuginfo-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: 361402863f8d8dc683f6c204b3c35cb3837123c812da494d43329de2a441bf6c
libsoup-debugsource-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: e4db740ab706fb4f5e0f2628042d32e9c16201516e4eae97b71f2c77c229a56f
libsoup-devel-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: 657ac3897493226d8cf32ffe9f5162008561281346370bd0338db275d36d8b1d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
ppc64le
libsoup-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 229620e88e536bdd9effdcaaf63133f88c38cc5639118f5548b62f671eb5d629
libsoup-debuginfo-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: ac8efcef49afa1b67b8df1311c324e6e7bf6e1dddd1e25ffe4181ca51aba37db
libsoup-debugsource-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 6b0f5753938153d04fc66d1d0c2b2051d55cbcaad4ceb4bf7a78ca75c4c279b4
libsoup-devel-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 4db2916d4079c98a8cd18fa6b07f71c0d4c7570003e686b7089b353d357345ef

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
x86_64
libsoup-2.72.0-10.el9_6.7.i686.rpm SHA-256: 27bae15de889235181c6a5cca7bb59f13f8d75a12f95150567c8c1633f8e2944
libsoup-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 8739607467869809fce75dc8a6c1b76a8bdd2cccba37ad08fdd95cb268df7a1f
libsoup-debuginfo-2.72.0-10.el9_6.7.i686.rpm SHA-256: 81ad46795691098d99694adaaef58df0812250ce9a02d9c76fdf61f6dcfcc1e9
libsoup-debuginfo-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 12682d69e8fa1fd73d8bc363b76eba03e1239a804fab3082166a3394681dcaee
libsoup-debugsource-2.72.0-10.el9_6.7.i686.rpm SHA-256: d5047f0affc4dd33ac7f22969dc4059d67f7e7fb2b1c465c472352b77c739194
libsoup-debugsource-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 1639054e6e11de0f23f2cb153aa942548fb43e105e74030503c54890d267a22c
libsoup-devel-2.72.0-10.el9_6.7.i686.rpm SHA-256: 412d5b3e91d27eb2341ba08b09c5b3bb425f3114b85337ebdb1ad4cf19025907
libsoup-devel-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: c0fd251b17828049c1dc26f51e8a1840cfc3faf81718121b7954bffba46a5f5b

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
aarch64
libsoup-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: fb6a22a1cefd96daea96bf544413c3f85f456b46604c129f8032de0516db6ee2
libsoup-debuginfo-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: 361402863f8d8dc683f6c204b3c35cb3837123c812da494d43329de2a441bf6c
libsoup-debugsource-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: e4db740ab706fb4f5e0f2628042d32e9c16201516e4eae97b71f2c77c229a56f
libsoup-devel-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: 657ac3897493226d8cf32ffe9f5162008561281346370bd0338db275d36d8b1d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
s390x
libsoup-2.72.0-10.el9_6.7.s390x.rpm SHA-256: b4dafe62fc048aed9bf52604fa994f310f3b4de3b7232866f132a1540d41f343
libsoup-debuginfo-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 8ba079687f52f476adcf00858bd39c86c3b9ab956cdac1ce11265e4ed2c9ceaf
libsoup-debugsource-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 7e6d7989ad8cef6c60c80db575f1f9747b3ae7354cb0b900e3528bc375da4b05
libsoup-devel-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 8bf8cf2084323657b653da0c8f3a6c00970e1117a180a85464b83de5c8e46788

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
x86_64
libsoup-2.72.0-10.el9_6.7.i686.rpm SHA-256: 27bae15de889235181c6a5cca7bb59f13f8d75a12f95150567c8c1633f8e2944
libsoup-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 8739607467869809fce75dc8a6c1b76a8bdd2cccba37ad08fdd95cb268df7a1f
libsoup-debuginfo-2.72.0-10.el9_6.7.i686.rpm SHA-256: 81ad46795691098d99694adaaef58df0812250ce9a02d9c76fdf61f6dcfcc1e9
libsoup-debuginfo-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 12682d69e8fa1fd73d8bc363b76eba03e1239a804fab3082166a3394681dcaee
libsoup-debugsource-2.72.0-10.el9_6.7.i686.rpm SHA-256: d5047f0affc4dd33ac7f22969dc4059d67f7e7fb2b1c465c472352b77c739194
libsoup-debugsource-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: 1639054e6e11de0f23f2cb153aa942548fb43e105e74030503c54890d267a22c
libsoup-devel-2.72.0-10.el9_6.7.i686.rpm SHA-256: 412d5b3e91d27eb2341ba08b09c5b3bb425f3114b85337ebdb1ad4cf19025907
libsoup-devel-2.72.0-10.el9_6.7.x86_64.rpm SHA-256: c0fd251b17828049c1dc26f51e8a1840cfc3faf81718121b7954bffba46a5f5b

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
aarch64
libsoup-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: fb6a22a1cefd96daea96bf544413c3f85f456b46604c129f8032de0516db6ee2
libsoup-debuginfo-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: 361402863f8d8dc683f6c204b3c35cb3837123c812da494d43329de2a441bf6c
libsoup-debugsource-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: e4db740ab706fb4f5e0f2628042d32e9c16201516e4eae97b71f2c77c229a56f
libsoup-devel-2.72.0-10.el9_6.7.aarch64.rpm SHA-256: 657ac3897493226d8cf32ffe9f5162008561281346370bd0338db275d36d8b1d

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
ppc64le
libsoup-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 229620e88e536bdd9effdcaaf63133f88c38cc5639118f5548b62f671eb5d629
libsoup-debuginfo-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: ac8efcef49afa1b67b8df1311c324e6e7bf6e1dddd1e25ffe4181ca51aba37db
libsoup-debugsource-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 6b0f5753938153d04fc66d1d0c2b2051d55cbcaad4ceb4bf7a78ca75c4c279b4
libsoup-devel-2.72.0-10.el9_6.7.ppc64le.rpm SHA-256: 4db2916d4079c98a8cd18fa6b07f71c0d4c7570003e686b7089b353d357345ef

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
libsoup-2.72.0-10.el9_6.7.src.rpm SHA-256: f1b67cc0984bf664387e343b234ae989085c9c8d7194d4e8c067240c68a1f1ff
s390x
libsoup-2.72.0-10.el9_6.7.s390x.rpm SHA-256: b4dafe62fc048aed9bf52604fa994f310f3b4de3b7232866f132a1540d41f343
libsoup-debuginfo-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 8ba079687f52f476adcf00858bd39c86c3b9ab956cdac1ce11265e4ed2c9ceaf
libsoup-debugsource-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 7e6d7989ad8cef6c60c80db575f1f9747b3ae7354cb0b900e3528bc375da4b05
libsoup-devel-2.72.0-10.el9_6.7.s390x.rpm SHA-256: 8bf8cf2084323657b653da0c8f3a6c00970e1117a180a85464b83de5c8e46788

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.