Threats Tagged 'cve-2026-0719'

3.26.1 includes CVE fixes for CVE-2025-15467, CVE-2025-6176, CVE-2026-1761, CVE-2026-0719, CVE-2025-61732, and CVE-2025-61726. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.26 release is based on Eclipse Che 7.113 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw

Two security vulnerabilities have been identified in the libsoup HTTP client and server library used in GNOME, affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support. The first vulnerability (CVE-2026-0719) involves a signed to unsigned conversion error that leads to a stack-based buffer overflow in NTLM authentication. The second vulnerability (CVE-2026-1761) is a stack-based buffer overflow in multipart HTTP response parsing. These issues could potentially allow attackers to cause memory corruption. Red Hat has released security updates addressing these vulnerabilities.

This advisory addresses two stack-based buffer overflow vulnerabilities in libsoup used by spice-client-win MSI installers for Windows clients. The first vulnerability (CVE-2026-0719) involves a signed to unsigned conversion error in NTLM authentication, and the second (CVE-2026-1761) concerns multipart HTTP response parsing. These issues could lead to memory corruption. Red Hat has issued security updates for spice-client-win on Red Hat Enterprise Linux 8.8 variants to fix these vulnerabilities.

Two stack-based buffer overflow vulnerabilities have been identified in libsoup, affecting the spice-client-win MSI installers for Windows clients distributed with Red Hat Enterprise Linux 8.6 variants. The first vulnerability (CVE-2026-0719) arises from a signed to unsigned conversion error in NTLM authentication, and the second (CVE-2026-1761) involves multipart HTTP response parsing. Red Hat has issued security updates addressing these issues in spice-client-win packages for multiple Red Hat Enterprise Linux 8.6 update services. The vulnerabilities are rated as important by Red Hat Product Security.

This security advisory addresses two stack-based buffer overflow vulnerabilities in libsoup used by the spice-client-win MSI installers for Windows clients. The first vulnerability (CVE-2026-0719) involves a signed to unsigned conversion error in libsoup NTLM authentication. The second vulnerability (CVE-2026-1761) involves a stack-based buffer overflow in libsoup multipart response parsing. These issues affect Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Update Support versions. Red Hat has released updated spice-client-win packages to fix these vulnerabilities.

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719) * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This security advisory addresses two stack-based buffer overflow vulnerabilities in the libsoup library used by spice-client-win MSI installers for Windows clients. The first vulnerability (CVE-2026-0719) arises from a signed to unsigned conversion error in libsoup's NTLM authentication. The second vulnerability (CVE-2026-1761) involves a stack-based buffer overflow during multipart HTTP response parsing. These issues affect Red Hat Enterprise Linux 8.2 AUS versions of the spice-client-win package. Red Hat has released an important security update to address these vulnerabilities.

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719) * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication (CVE-2026-0719) * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response (CVE-2026-1761) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Two security vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, used in Red Hat Enterprise Linux 9. These include a signed to unsigned conversion error causing a stack-based buffer overflow in NTLM authentication (CVE-2026-0719) and a stack-based buffer overflow in multipart HTTP response parsing (CVE-2026-1761). Red Hat has issued an important security advisory with updates to address these issues. The vulnerabilities are rated as having important security impact, and updated libsoup packages are available for Red Hat Enterprise Linux 9 across multiple architectures.