[From nobody Thu Oct  1 12:23:11 2026
Received: (at submit) by bugs.debian.org; 26 Jul 2026 20:01:40 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-10.0 required=4.0 tests=BAYES_00,FROMDEVELOPER,
 NO_RELAYS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 19; hammy, 139; neutral, 35; spammy,
 1. spammytokens:0.941-+--H*r:bugs.debian.org
 hammytokens:0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc,
 0.000-+--H*F:U*carnil, 0.000-+--H*Ad:N*Bug, 0.000-+--HTo:N*Debian
Return-path: &lt;carnil@debian.org&gt;
Received: via submission by buxtehude.debian.org with esmtp (Exim 4.96)
 (envelope-from &lt;carnil@debian.org&gt;) id 1wo52Z-004dZ8-1q
 for submit@bugs.debian.org; Sun, 26 Jul 2026 20:01:40 +0000
Content-Type: text/plain; charset=&quot;utf-8&quot;
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: Salvatore Bonaccorso &lt;carnil@debian.org&gt;
To: Debian Bug Tracking System &lt;submit@bugs.debian.org&gt;
Subject: libsoup3: CVE-2026-12478
Message-ID: &lt;178509609911.123642.9668832674201711738.reportbug@eldamar.lan&gt;
X-Mailer: reportbug 13.2.0+nmu1
Date: Sun, 26 Jul 2026 22:01:39 +0200
Delivered-To: submit@bugs.debian.org
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]