Nixpkgs security tracker

Untriaged

Permalink CVE-2025-4035

4.3 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 7 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 year ago
@LeSuisse ignored package tests.pkg-config.defaultPkgConfigPackages."libsoup-gnome-2.4" 7 months, 2 weeks ago

Libsoup: cookie domain validation bypass via uppercase characters in libsoup

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation.

References

https://access.redhat.com/security/cve/CVE-2025-4035 vdb-entryx_refsource_REDHAT
RHBZ#2362651 issue-trackingx_refsource_REDHAT
RHSA-2025:8128 vendor-advisoryx_refsource_REDHAT

Affected products

libsoup

libsoup3

Matching in nixpkgs

pkgs.libsoup_3

HTTP client/server library for GNOME

nixos-unstable -
- nixos-unstable-small 3.6.6
nixos-26.05 -
- nixos-26.05-small 3.6.6

pkgs.libsoup_2_4

None

nixos-26.05 -
- nixos-26.05-small 2.74.3

Package maintainers