critical
CVE-2018-12910
libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (medium), Oracle (medium), Ubuntu (medium).
Description
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | libsoup | 2.53.90-4.ph1 |
| Photon OS 2.0 | libsoup | 2.57.1-4.ph2 |
| debian 11 | libsoup2.4 | 2.62.2-2 |
| debian 12 | libsoup2.4 | 2.62.2-2 |
| debian 13 | libsoup2.4 | 2.62.2-2 |
| debian 8 | libsoup2.4 | 2.48.0-1+deb8u2 |
| debian 9 | libsoup2.4 | 2.56.0-2+deb9u2 |
| echo | libsoup2.4 | 2.62.2-2 |
| Oracle Linux 7 | PackageKit, PackageKit-command-not-found, PackageKit-cron and 422 more | 1.1.10-1.0.1.el7 and 111 more |
| Red Hat | libsoup, libsoup-devel | no fix listed |
| seal Red Hat 6 | freetype, glib2, seal-freetype and 1 more | 2.3.11-19.el6_10+sp999 and 1 more |
| seal Red Hat 7 | libsoup, seal-libsoup | 2.62.2-2.el7+sp999 |
Show all 447 entries from 18 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | libsoup | 2.53.90-4.ph1 |
| Photon OS 2.0 | libsoup | 2.57.1-4.ph2 |
| debian 11 | libsoup2.4 | 2.62.2-2 |
| debian 12 | libsoup2.4 | 2.62.2-2 |
| debian 13 | libsoup2.4 | 2.62.2-2 |
| debian 8 | libsoup2.4 | 2.48.0-1+deb8u2 |
| debian 9 | libsoup2.4 | 2.56.0-2+deb9u2 |
| echo | libsoup2.4 | 2.62.2-2 |
| Oracle Linux 7 | PackageKit | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-command-not-found | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-cron | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-glib | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-glib-devel | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-gstreamer-plugin | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-gtk3-module | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-yum | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | PackageKit-yum-plugin | 1.1.10-1.0.1.el7 |
| Oracle Linux 7 | accountsservice | 0.6.50-2.el7 |
| Oracle Linux 7 | accountsservice-devel | 0.6.50-2.el7 |
| Oracle Linux 7 | accountsservice-libs | 0.6.50-2.el7 |
| Oracle Linux 7 | adwaita-cursor-theme | 3.28.0-1.el7 |
| Oracle Linux 7 | adwaita-gtk2-theme | 3.28-2.el7 |
| Oracle Linux 7 | adwaita-icon-theme | 3.28.0-1.el7 |
| Oracle Linux 7 | adwaita-icon-theme-devel | 3.28.0-1.el7 |
| Oracle Linux 7 | appstream-data | 7-20180614.el7 |
| Oracle Linux 7 | at-spi2-atk | 2.26.2-1.el7 |
| Oracle Linux 7 | at-spi2-atk-devel | 2.26.2-1.el7 |
| Oracle Linux 7 | at-spi2-core | 2.28.0-1.el7 |
| Oracle Linux 7 | at-spi2-core-devel | 2.28.0-1.el7 |
| Oracle Linux 7 | atk | 2.28.1-1.el7 |
| Oracle Linux 7 | atk-devel | 2.28.1-1.el7 |
| Oracle Linux 7 | baobab | 3.28.0-2.el7 |
| Oracle Linux 7 | bolt | 0.4-3.el7 |
| Oracle Linux 7 | brasero | 3.12.2-5.el7 |
| Oracle Linux 7 | brasero-devel | 3.12.2-5.el7 |
| Oracle Linux 7 | brasero-libs | 3.12.2-5.el7 |
| Oracle Linux 7 | brasero-nautilus | 3.12.2-5.el7 |
| Oracle Linux 7 | cairo | 1.15.12-3.el7 |
| Oracle Linux 7 | cairo-devel | 1.15.12-3.el7 |
| Oracle Linux 7 | cairo-gobject | 1.15.12-3.el7 |
| Oracle Linux 7 | cairo-gobject-devel | 1.15.12-3.el7 |
| Oracle Linux 7 | cairo-tools | 1.15.12-3.el7 |
| Oracle Linux 7 | cheese | 2:3.28.0-1.el7 |
| Oracle Linux 7 | cheese-libs | 2:3.28.0-1.el7 |
| Oracle Linux 7 | cheese-libs-devel | 2:3.28.0-1.el7 |
| Oracle Linux 7 | clutter-gst3 | 3.0.26-1.el7 |
| Oracle Linux 7 | clutter-gst3-devel | 3.0.26-1.el7 |
| Oracle Linux 7 | compat-exiv2-023 | 0.23-2.el7 |
| Oracle Linux 7 | compat-libical1 | 1.0.1-2.el7 |
| Oracle Linux 7 | control-center | 1:3.28.1-4.el7 |
| Oracle Linux 7 | control-center-filesystem | 1:3.28.1-4.el7 |
| Oracle Linux 7 | dconf | 0.28.0-4.el7 |
| Oracle Linux 7 | dconf-devel | 0.28.0-4.el7 |
| Oracle Linux 7 | dconf-editor | 3.28.0-1.el7 |
| Oracle Linux 7 | devhelp | 1:3.28.1-1.el7 |
| Oracle Linux 7 | devhelp-devel | 1:3.28.1-1.el7 |
| Oracle Linux 7 | devhelp-libs | 1:3.28.1-1.el7 |
| Oracle Linux 7 | ekiga | 4.0.1-8.el7 |
| Oracle Linux 7 | empathy | 3.12.13-1.el7 |
| Oracle Linux 7 | eog | 3.28.3-1.el7 |
| Oracle Linux 7 | eog-devel | 3.28.3-1.el7 |
| Oracle Linux 7 | evince | 3.28.2-5.el7 |
| Oracle Linux 7 | evince-browser-plugin | 3.28.2-5.el7 |
| Oracle Linux 7 | evince-devel | 3.28.2-5.el7 |
| Oracle Linux 7 | evince-dvi | 3.28.2-5.el7 |
| Oracle Linux 7 | evince-libs | 3.28.2-5.el7 |
| Oracle Linux 7 | evince-nautilus | 3.28.2-5.el7 |
| Oracle Linux 7 | evolution | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-bogofilter | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-data-server | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-data-server-devel | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-data-server-doc | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-data-server-langpacks | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-data-server-perl | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-data-server-tests | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-devel | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-devel-docs | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-ews | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-ews-langpacks | 3.28.5-1.el7 |
| Oracle Linux 7 | evolution-help | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-langpacks | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-mapi | 3.28.3-2.el7 |
| Oracle Linux 7 | evolution-mapi-langpacks | 3.28.3-2.el7 |
| Oracle Linux 7 | evolution-pst | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-spamassassin | 3.28.5-2.el7 |
| Oracle Linux 7 | evolution-tests | 3.28.5-2.el7 |
| Oracle Linux 7 | file-roller | 3.28.1-2.el7 |
| Oracle Linux 7 | file-roller-nautilus | 3.28.1-2.el7 |
| Oracle Linux 7 | flatpak | 1.0.2-2.el7 |
| Oracle Linux 7 | flatpak-builder | 1.0.0-2.el7 |
| Oracle Linux 7 | flatpak-devel | 1.0.2-2.el7 |
| Oracle Linux 7 | flatpak-libs | 1.0.2-2.el7 |
| Oracle Linux 7 | folks | 1:0.11.4-1.el7 |
| Oracle Linux 7 | folks-devel | 1:0.11.4-1.el7 |
| Oracle Linux 7 | folks-tools | 1:0.11.4-1.el7 |
| Oracle Linux 7 | fontconfig | 2.13.0-4.3.el7 |
| Oracle Linux 7 | fontconfig-devel | 2.13.0-4.3.el7 |
| Oracle Linux 7 | fontconfig-devel-doc | 2.13.0-4.3.el7 |
| Oracle Linux 7 | freetype | 2.8-12.el7 |
| Oracle Linux 7 | freetype-demos | 2.8-12.el7 |
| Oracle Linux 7 | freetype-devel | 2.8-12.el7 |
| Oracle Linux 7 | fribidi | 1.0.2-1.el7 |
| Oracle Linux 7 | fribidi-devel | 1.0.2-1.el7 |
| Oracle Linux 7 | fwupd | 1.0.8-4.el7 |
| Oracle Linux 7 | fwupd-devel | 1.0.8-4.el7 |
| Oracle Linux 7 | fwupdate | 12-5.0.1.el7 |
| Oracle Linux 7 | fwupdate-devel | 12-5.0.1.el7 |
| Oracle Linux 7 | fwupdate-efi | 12-5.0.1.el7 |
| Oracle Linux 7 | fwupdate-libs | 12-5.0.1.el7 |
| Oracle Linux 7 | gcr | 3.28.0-1.el7 |
| Oracle Linux 7 | gcr-devel | 3.28.0-1.el7 |
| Oracle Linux 7 | gdk-pixbuf2 | 2.36.12-3.el7 |
| Oracle Linux 7 | gdk-pixbuf2-devel | 2.36.12-3.el7 |
| Oracle Linux 7 | gdk-pixbuf2-tests | 2.36.12-3.el7 |
| Oracle Linux 7 | gdm | 1:3.28.2-9.el7 |
| Oracle Linux 7 | gdm-devel | 1:3.28.2-9.el7 |
| Oracle Linux 7 | gdm-pam-extensions-devel | 1:3.28.2-9.el7 |
| Oracle Linux 7 | gedit | 2:3.28.1-1.el7 |
| Oracle Linux 7 | gedit-devel | 2:3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-bookmarks | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-bracketcompletion | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-charmap | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-codecomment | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-colorpicker | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-colorschemer | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-commander | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-drawspaces | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-findinfiles | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-joinlines | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-multiedit | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-smartspaces | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-synctex | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-terminal | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-textsize | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-translate | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugin-wordcompletion | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugins | 3.28.1-1.el7 |
| Oracle Linux 7 | gedit-plugins-data | 3.28.1-1.el7 |
| Oracle Linux 7 | geoclue2 | 2.4.8-1.el7 |
| Oracle Linux 7 | geoclue2-demos | 2.4.8-1.el7 |
| Oracle Linux 7 | geoclue2-devel | 2.4.8-1.el7 |
| Oracle Linux 7 | geoclue2-libs | 2.4.8-1.el7 |
| Oracle Linux 7 | geocode-glib | 3.26.0-2.el7 |
| Oracle Linux 7 | geocode-glib-devel | 3.26.0-2.el7 |
| Oracle Linux 7 | gjs | 1.52.3-1.el7 |
| Oracle Linux 7 | gjs-devel | 1.52.3-1.el7 |
| Oracle Linux 7 | gjs-tests | 1.52.3-1.el7 |
| Oracle Linux 7 | glade | 3.22.1-1.el7 |
| Oracle Linux 7 | glade-devel | 3.22.1-1.el7 |
| Oracle Linux 7 | glade-libs | 3.22.1-1.el7 |
| Oracle Linux 7 | glib-networking | 2.56.1-1.el7 |
| Oracle Linux 7 | glib-networking-tests | 2.56.1-1.el7 |
| Oracle Linux 7 | glib2 | 2.56.1-2.el7 |
| Oracle Linux 7 | glib2-devel | 2.56.1-2.el7 |
| Oracle Linux 7 | glib2-doc | 2.56.1-2.el7 |
| Oracle Linux 7 | glib2-fam | 2.56.1-2.el7 |
| Oracle Linux 7 | glib2-static | 2.56.1-2.el7 |
| Oracle Linux 7 | glib2-tests | 2.56.1-2.el7 |
| Oracle Linux 7 | glibmm24 | 2.56.0-1.el7 |
| Oracle Linux 7 | glibmm24-devel | 2.56.0-1.el7 |
| Oracle Linux 7 | glibmm24-doc | 2.56.0-1.el7 |
| Oracle Linux 7 | gnome-backgrounds | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-bluetooth | 1:3.28.2-1.el7 |
| Oracle Linux 7 | gnome-bluetooth-libs | 1:3.28.2-1.el7 |
| Oracle Linux 7 | gnome-bluetooth-libs-devel | 1:3.28.2-1.el7 |
| Oracle Linux 7 | gnome-boxes | 3.28.5-2.el7 |
| Oracle Linux 7 | gnome-calculator | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-classic-session | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-clocks | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-color-manager | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-contacts | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-desktop3 | 3.28.2-2.el7 |
| Oracle Linux 7 | gnome-desktop3-devel | 3.28.2-2.el7 |
| Oracle Linux 7 | gnome-desktop3-tests | 3.28.2-2.el7 |
| Oracle Linux 7 | gnome-devel-docs | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-dictionary | 3.26.1-2.el7 |
| Oracle Linux 7 | gnome-disk-utility | 3.28.3-1.el7 |
| Oracle Linux 7 | gnome-documents | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-documents-libs | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-font-viewer | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-cs | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-de | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-es | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-fr | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-gl | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-hu | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-it | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-pl | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-pt_BR | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-getting-started-docs-ru | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-initial-setup | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-keyring | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-keyring-pam | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-online-accounts | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-online-accounts-devel | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-online-miners | 3.26.0-1.el7 |
| Oracle Linux 7 | gnome-packagekit | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-packagekit-common | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-packagekit-installer | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-packagekit-updater | 3.28.0-1.el7 |
| Oracle Linux 7 | gnome-screenshot | 3.26.0-1.el7 |
| Oracle Linux 7 | gnome-session | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-session-custom-session | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-session-wayland-session | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-session-xsession | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-settings-daemon | 3.28.1-2.el7 |
| Oracle Linux 7 | gnome-settings-daemon-devel | 3.28.1-2.el7 |
| Oracle Linux 7 | gnome-shell | 3.28.3-6.el7 |
| Oracle Linux 7 | gnome-shell-extension-alternate-tab | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-apps-menu | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-auto-move-windows | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-common | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-dash-to-dock | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-drive-menu | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-launch-new-instance | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-native-window-placement | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-no-hot-corner | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-panel-favorites | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-places-menu | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-screenshot-window-sizer | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-systemMonitor | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-top-icons | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-updates-dialog | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-user-theme | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-window-list | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-windowsNavigator | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-shell-extension-workspace-indicator | 3.28.1-5.el7 |
| Oracle Linux 7 | gnome-software | 3.28.2-3.el7 |
| Oracle Linux 7 | gnome-software-devel | 3.28.2-3.el7 |
| Oracle Linux 7 | gnome-software-editor | 3.28.2-3.el7 |
| Oracle Linux 7 | gnome-system-monitor | 3.28.2-1.el7 |
| Oracle Linux 7 | gnome-terminal | 3.28.2-2.el7 |
| Oracle Linux 7 | gnome-terminal-nautilus | 3.28.2-2.el7 |
| Oracle Linux 7 | gnome-themes-standard | 3.28-2.el7 |
| Oracle Linux 7 | gnome-tweak-tool | 3.28.1-2.el7 |
| Oracle Linux 7 | gnome-user-docs | 3.28.2-1.el7 |
| Oracle Linux 7 | gnote | 3.28.0-1.el7 |
| Oracle Linux 7 | gobject-introspection | 1.56.1-1.el7 |
| Oracle Linux 7 | gobject-introspection-devel | 1.56.1-1.el7 |
| Oracle Linux 7 | gom | 0.3.3-1.el7 |
| Oracle Linux 7 | gom-devel | 0.3.3-1.el7 |
| Oracle Linux 7 | google-noto-emoji-color-fonts | 20180508-4.el7 |
| Oracle Linux 7 | google-noto-emoji-fonts | 20180508-4.el7 |
| Oracle Linux 7 | grilo | 0.3.6-1.el7 |
| Oracle Linux 7 | grilo-devel | 0.3.6-1.el7 |
| Oracle Linux 7 | grilo-plugins | 0.3.7-1.el7 |
| Oracle Linux 7 | gsettings-desktop-schemas | 3.28.0-2.el7 |
| Oracle Linux 7 | gsettings-desktop-schemas-devel | 3.28.0-2.el7 |
| Oracle Linux 7 | gspell | 1.6.1-1.el7 |
| Oracle Linux 7 | gspell-devel | 1.6.1-1.el7 |
| Oracle Linux 7 | gspell-doc | 1.6.1-1.el7 |
| Oracle Linux 7 | gssdp | 1.0.2-1.el7 |
| Oracle Linux 7 | gssdp-devel | 1.0.2-1.el7 |
| Oracle Linux 7 | gssdp-docs | 1.0.2-1.el7 |
| Oracle Linux 7 | gssdp-utils | 1.0.2-1.el7 |
| Oracle Linux 7 | gstreamer1-plugins-base | 1.10.4-2.el7 |
| Oracle Linux 7 | gstreamer1-plugins-base-devel | 1.10.4-2.el7 |
| Oracle Linux 7 | gstreamer1-plugins-base-devel-docs | 1.10.4-2.el7 |
| Oracle Linux 7 | gstreamer1-plugins-base-tools | 1.10.4-2.el7 |
| Oracle Linux 7 | gtk-doc | 1.28-2.el7 |
| Oracle Linux 7 | gtk-update-icon-cache | 3.22.30-3.el7 |
| Oracle Linux 7 | gtk3 | 3.22.30-3.el7 |
| Oracle Linux 7 | gtk3-devel | 3.22.30-3.el7 |
| Oracle Linux 7 | gtk3-devel-docs | 3.22.30-3.el7 |
| Oracle Linux 7 | gtk3-immodule-xim | 3.22.30-3.el7 |
| Oracle Linux 7 | gtk3-immodules | 3.22.30-3.el7 |
| Oracle Linux 7 | gtk3-tests | 3.22.30-3.el7 |
| Oracle Linux 7 | gtksourceview3 | 3.24.8-1.el7 |
| Oracle Linux 7 | gtksourceview3-devel | 3.24.8-1.el7 |
| Oracle Linux 7 | gtksourceview3-tests | 3.24.8-1.el7 |
| Oracle Linux 7 | gucharmap | 10.0.4-1.el7 |
| Oracle Linux 7 | gucharmap-devel | 10.0.4-1.el7 |
| Oracle Linux 7 | gucharmap-libs | 10.0.4-1.el7 |
| Oracle Linux 7 | gupnp | 1.0.2-5.el7 |
| Oracle Linux 7 | gupnp-devel | 1.0.2-5.el7 |
| Oracle Linux 7 | gupnp-docs | 1.0.2-5.el7 |
| Oracle Linux 7 | gupnp-igd | 0.2.5-2.el7 |
| Oracle Linux 7 | gupnp-igd-devel | 0.2.5-2.el7 |
| Oracle Linux 7 | gupnp-igd-python | 0.2.5-2.el7 |
| Oracle Linux 7 | gvfs | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-afc | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-afp | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-archive | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-client | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-devel | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-fuse | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-goa | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-gphoto2 | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-mtp | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-smb | 1.36.2-1.el7 |
| Oracle Linux 7 | gvfs-tests | 1.36.2-1.el7 |
| Oracle Linux 7 | harfbuzz | 1.7.5-2.el7 |
| Oracle Linux 7 | harfbuzz-devel | 1.7.5-2.el7 |
| Oracle Linux 7 | harfbuzz-icu | 1.7.5-2.el7 |
| Oracle Linux 7 | json-glib | 1.4.2-2.el7 |
| Oracle Linux 7 | json-glib-devel | 1.4.2-2.el7 |
| Oracle Linux 7 | json-glib-tests | 1.4.2-2.el7 |
| Oracle Linux 7 | libappstream-glib | 0.7.8-2.el7 |
| Oracle Linux 7 | libappstream-glib-builder | 0.7.8-2.el7 |
| Oracle Linux 7 | libappstream-glib-builder-devel | 0.7.8-2.el7 |
| Oracle Linux 7 | libappstream-glib-devel | 0.7.8-2.el7 |
| Oracle Linux 7 | libchamplain | 0.12.16-2.el7 |
| Oracle Linux 7 | libchamplain-demos | 0.12.16-2.el7 |
| Oracle Linux 7 | libchamplain-devel | 0.12.16-2.el7 |
| Oracle Linux 7 | libchamplain-gtk | 0.12.16-2.el7 |
| Oracle Linux 7 | libcroco | 0.6.12-4.el7 |
| Oracle Linux 7 | libcroco-devel | 0.6.12-4.el7 |
| Oracle Linux 7 | libgdata | 0.17.9-1.el7 |
| Oracle Linux 7 | libgdata-devel | 0.17.9-1.el7 |
| Oracle Linux 7 | libgee | 0.20.1-1.el7 |
| Oracle Linux 7 | libgee-devel | 0.20.1-1.el7 |
| Oracle Linux 7 | libgepub | 0.6.0-1.el7 |
| Oracle Linux 7 | libgepub-devel | 0.6.0-1.el7 |
| Oracle Linux 7 | libgexiv2 | 0.10.8-1.el7 |
| Oracle Linux 7 | libgexiv2-devel | 0.10.8-1.el7 |
| Oracle Linux 7 | libgnomekbd | 3.26.0-1.el7 |
| Oracle Linux 7 | libgnomekbd-devel | 3.26.0-1.el7 |
| Oracle Linux 7 | libgovirt | 0.3.4-1.el7 |
| Oracle Linux 7 | libgovirt-devel | 0.3.4-1.el7 |
| Oracle Linux 7 | libgtop2 | 2.38.0-3.el7 |
| Oracle Linux 7 | libgtop2-devel | 2.38.0-3.el7 |
| Oracle Linux 7 | libgweather | 3.28.2-2.el7 |
| Oracle Linux 7 | libgweather-devel | 3.28.2-2.el7 |
| Oracle Linux 7 | libgxps | 0.3.0-4.el7 |
| Oracle Linux 7 | libgxps-devel | 0.3.0-4.el7 |
| Oracle Linux 7 | libgxps-tools | 0.3.0-4.el7 |
| Oracle Linux 7 | libical | 3.0.3-2.el7 |
| Oracle Linux 7 | libical-devel | 3.0.3-2.el7 |
| Oracle Linux 7 | libical-glib | 3.0.3-2.el7 |
| Oracle Linux 7 | libical-glib-devel | 3.0.3-2.el7 |
| Oracle Linux 7 | libical-glib-doc | 3.0.3-2.el7 |
| Oracle Linux 7 | libjpeg-turbo | 1.2.90-6.el7 |
| Oracle Linux 7 | libjpeg-turbo-devel | 1.2.90-6.el7 |
| Oracle Linux 7 | libjpeg-turbo-static | 1.2.90-6.el7 |
| Oracle Linux 7 | libjpeg-turbo-utils | 1.2.90-6.el7 |
| Oracle Linux 7 | libmediaart | 1.9.4-1.el7 |
| Oracle Linux 7 | libmediaart-devel | 1.9.4-1.el7 |
| Oracle Linux 7 | libmediaart-tests | 1.9.4-1.el7 |
| Oracle Linux 7 | libosinfo | 1.1.0-2.el7 |
| Oracle Linux 7 | libosinfo-devel | 1.1.0-2.el7 |
| Oracle Linux 7 | libosinfo-vala | 1.1.0-2.el7 |
| Oracle Linux 7 | libpeas | 1.22.0-1.el7 |
| Oracle Linux 7 | libpeas-devel | 1.22.0-1.el7 |
| Oracle Linux 7 | libpeas-gtk | 1.22.0-1.el7 |
| Oracle Linux 7 | libpeas-loader-python | 1.22.0-1.el7 |
| Oracle Linux 7 | librsvg2 | 2.40.20-1.el7 |
| Oracle Linux 7 | librsvg2-devel | 2.40.20-1.el7 |
| Oracle Linux 7 | librsvg2-tools | 2.40.20-1.el7 |
| Oracle Linux 7 | libsecret | 0.18.6-1.el7 |
| Oracle Linux 7 | libsecret-devel | 0.18.6-1.el7 |
| Oracle Linux 7 | libsoup | 2.62.2-2.el7 |
| Oracle Linux 7 | libsoup-devel | 2.62.2-2.el7 |
| Oracle Linux 7 | libwayland-client | 1.15.0-1.el7 |
| Oracle Linux 7 | libwayland-cursor | 1.15.0-1.el7 |
| Oracle Linux 7 | libwayland-egl | 1.15.0-1.el7 |
| Oracle Linux 7 | libwayland-server | 1.15.0-1.el7 |
| Oracle Linux 7 | libwnck3 | 3.24.1-2.el7 |
| Oracle Linux 7 | libwnck3-devel | 3.24.1-2.el7 |
| Oracle Linux 7 | mozjs52 | 52.9.0-1.0.1.el7 |
| Oracle Linux 7 | mozjs52-devel | 52.9.0-1.0.1.el7 |
| Oracle Linux 7 | mutter | 3.28.3-4.el7 |
| Oracle Linux 7 | mutter-devel | 3.28.3-4.el7 |
| Oracle Linux 7 | nautilus | 3.26.3.1-2.el7 |
| Oracle Linux 7 | nautilus-devel | 3.26.3.1-2.el7 |
| Oracle Linux 7 | nautilus-extensions | 3.26.3.1-2.el7 |
| Oracle Linux 7 | nautilus-sendto | 1:3.8.6-1.el7 |
| Oracle Linux 7 | openchange | 2.3-3.el7 |
| Oracle Linux 7 | openchange-client | 2.3-3.el7 |
| Oracle Linux 7 | openchange-devel | 2.3-3.el7 |
| Oracle Linux 7 | openchange-devel-docs | 2.3-3.el7 |
| Oracle Linux 7 | oracle-logos | 70.0.3-4.0.9.el7 |
| Oracle Linux 7 | osinfo-db | 20180531-1.0.1.el7 |
| Oracle Linux 7 | pango | 1.42.4-1.el7 |
| Oracle Linux 7 | pango-devel | 1.42.4-1.el7 |
| Oracle Linux 7 | pango-tests | 1.42.4-1.el7 |
| Oracle Linux 7 | poppler | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-cpp | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-cpp-devel | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-demos | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-devel | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-glib | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-glib-devel | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-qt | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-qt-devel | 0.26.5-20.el7 |
| Oracle Linux 7 | poppler-utils | 0.26.5-20.el7 |
| Oracle Linux 7 | python2-gexiv2 | 0.10.8-1.el7 |
| Oracle Linux 7 | python2-pyatspi | 2.26.0-3.el7 |
| Oracle Linux 7 | rest | 0.8.1-2.el7 |
| Oracle Linux 7 | rest-devel | 0.8.1-2.el7 |
| Oracle Linux 7 | rhythmbox | 3.4.2-2.el7 |
| Oracle Linux 7 | rhythmbox-devel | 3.4.2-2.el7 |
| Oracle Linux 7 | seahorse-nautilus | 3.11.92-11.el7 |
| Oracle Linux 7 | shotwell | 0.28.4-1.el7 |
| Oracle Linux 7 | sushi | 3.28.3-1.el7 |
| Oracle Linux 7 | totem | 1:3.26.2-1.el7 |
| Oracle Linux 7 | totem-devel | 1:3.26.2-1.el7 |
| Oracle Linux 7 | totem-nautilus | 1:3.26.2-1.el7 |
| Oracle Linux 7 | totem-pl-parser | 3.26.1-1.el7 |
| Oracle Linux 7 | totem-pl-parser-devel | 3.26.1-1.el7 |
| Oracle Linux 7 | turbojpeg | 1.2.90-6.el7 |
| Oracle Linux 7 | turbojpeg-devel | 1.2.90-6.el7 |
| Oracle Linux 7 | upower | 0.99.7-1.el7 |
| Oracle Linux 7 | upower-devel | 0.99.7-1.el7 |
| Oracle Linux 7 | upower-devel-docs | 0.99.7-1.el7 |
| Oracle Linux 7 | vala | 0.40.8-1.el7 |
| Oracle Linux 7 | vala-devel | 0.40.8-1.el7 |
| Oracle Linux 7 | vala-doc | 0.40.8-1.el7 |
| Oracle Linux 7 | valadoc | 0.40.8-1.el7 |
| Oracle Linux 7 | valadoc-devel | 0.40.8-1.el7 |
| Oracle Linux 7 | vino | 3.22.0-7.el7 |
| Oracle Linux 7 | vte-profile | 0.52.2-2.el7 |
| Oracle Linux 7 | vte291 | 0.52.2-2.el7 |
| Oracle Linux 7 | vte291-devel | 0.52.2-2.el7 |
| Oracle Linux 7 | wayland-devel | 1.15.0-1.el7 |
| Oracle Linux 7 | wayland-doc | 1.15.0-1.el7 |
| Oracle Linux 7 | wayland-protocols-devel | 1.14-1.el7 |
| Oracle Linux 7 | webkitgtk4 | 2.20.5-1.el7 |
| Oracle Linux 7 | webkitgtk4-devel | 2.20.5-1.el7 |
| Oracle Linux 7 | webkitgtk4-doc | 2.20.5-1.el7 |
| Oracle Linux 7 | webkitgtk4-jsc | 2.20.5-1.el7 |
| Oracle Linux 7 | webkitgtk4-jsc-devel | 2.20.5-1.el7 |
| Oracle Linux 7 | webkitgtk4-plugin-process-gtk2 | 2.20.5-1.el7 |
| Oracle Linux 7 | xdg-desktop-portal | 1.0.2-1.el7 |
| Oracle Linux 7 | xdg-desktop-portal-devel | 1.0.2-1.el7 |
| Oracle Linux 7 | xdg-desktop-portal-gtk | 1.0.2-1.el7 |
| Oracle Linux 7 | yelp | 2:3.28.1-1.el7 |
| Oracle Linux 7 | yelp-devel | 2:3.28.1-1.el7 |
| Oracle Linux 7 | yelp-libs | 2:3.28.1-1.el7 |
| Oracle Linux 7 | yelp-tools | 3.28.0-1.el7 |
| Oracle Linux 7 | yelp-xsl | 3.28.0-1.el7 |
| Oracle Linux 7 | yelp-xsl-devel | 3.28.0-1.el7 |
| Oracle Linux 7 | zenity | 3.28.1-1.el7 |
| Red Hat | libsoup | no fix listed |
| Red Hat | libsoup-devel | no fix listed |
| seal Red Hat 6 | freetype | 2.3.11-19.el6_10+sp999 |
| seal Red Hat 6 | glib2 | 2.28.8-11.el6_10+sp999 |
| seal Red Hat 6 | seal-freetype | 2.3.11-19.el6_10+sp999 |
| seal Red Hat 6 | seal-glib2 | 2.28.8-11.el6_10+sp999 |
| seal Red Hat 7 | libsoup | 2.62.2-2.el7+sp999 |
| seal Red Hat 7 | seal-libsoup | 2.62.2-2.el7+sp999 |
| ubuntu 14.04 | libsoup2.4 | 2.44.2-1ubuntu2.3 |
| ubuntu 16.04 | libsoup2.4 | 2.52.2-1ubuntu0.3 |
| ubuntu 16.04-ESM | libsoup2.4 | 2.52.2-1ubuntu0.3 |
| ubuntu 17.10 | libsoup2.4 | 2.60.1-1ubuntu0.1 |
| ubuntu 18.04 | libsoup2.4 | 2.62.1-1ubuntu0.1 |
| ubuntu 18.04-ESM | libsoup2.4 | 2.62.1-1ubuntu0.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00003.html
- https://access.redhat.com/errata/RHBA-2019:0327
- https://access.redhat.com/errata/RHSA-2018:3140
- https://access.redhat.com/errata/RHSA-2018:3505
- https://access.redhat.com/security/cve/CVE-2018-12910
- https://gitlab.gnome.org/GNOME/gnome-sdk-images/commit/4215b8a21b3b3055e947312a8920df94f93ba047
- https://gitlab.gnome.org/GNOME/libsoup/commit/db2b0d5809d5f8226d47312b40992cadbcde439f
- https://gitlab.gnome.org/GNOME/libsoup/issues/3
All 17 references
- https://linux.oracle.com/cve/CVE-2018-12910.html
- https://linux.oracle.com/errata/ELSA-2018-3140.html
- https://lists.debian.org/debian-lts-announce/2018/07/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SBREWZ3EEDYWG6PCLWL2EJ24ME5ZFAX6/
- https://nvd.nist.gov/vuln/detail/CVE-2018-12910
- https://ubuntu.com/security/notices/USN-3701-1
- https://usn.ubuntu.com/3701-1/
- https://www.cve.org/CVERecord?id=CVE-2018-12910
- https://www.debian.org/security/2018/dsa-4241