Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

ELSA-2025-21657

UNKNOWN

ELSA-2025-21657: libsoup security update (IMPORTANT)

Published Dec 10, 2025

Modified 1 months ago

Fix available

Details

[2.62.2-2.0.7]

Backport patch for CVE-2025-4945 and CVE-2025-11021 [Orabug: 38664275]

[2.62.2-2.0.5]

Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 [Orabug: 38085184]
CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914

[2.62.2-2.0.3]

Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in
soup_header_parse_param_list_strict [Orabug: 37557504]

Affected Packages

OracleLinux:7libsoup

Fixed in:

0:2.62.2-2.0.7.el7

OracleLinux:7libsoup-devel

Fixed in:

0:2.62.2-2.0.7.el7

Related

CVE-2025-11021 CVE-2025-2784 CVE-2025-32049 CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 CVE-2025-4945 CVE-2025-4948

Ecosystems

Timeline

PublishedDec 10, 2025

ModifiedDec 10, 2025

ELSA-2025-21657 | Mondoo Vulnerability Intelligence