Medium5.9Red Hat & Ubuntu Linux

Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment

CVE-2026-5119 Published Mar 30, 2026

CVE-2026-5119

Affected products & platforms

Red Hat & Ubuntu LinuxUnclassified

Summary

Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-319. Affected package(s): libsoup, libsoup3. Resolved in Red Hat advisory RHSA-2026:13978 — update the affected packages (`sudo dnf update`).

Affected versions

libsoup-0:2.62.3-2.el8_4.9
libsoup3-0:3.6.5-3.el10_1.11
libsoup3-0:3.6.5-3.el10_2.11
libsoup-0:2.72.0-12.el9_7.6
libsoup-0:2.72.0-8.el9_4.10
libsoup-0:2.72.0-8.el9_2.11
libsoup-0:2.62.3-14.el8_10
libsoup-0:2.62.3-3.el8_8.9
libsoup-0:2.72.0-10.el9_6.7
libsoup-0:2.72.0-8.el9_0.10
libsoup-0:2.72.0-16.el9_8.1
libsoup-0:2.62.2-12.el7_9

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Fixed versions

RHSA-2026:13978

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Update the affected package(s) to the fixed version shipped in RHSA-2026:13978 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.