SUSE-SU-2026:20360-1

Security update for libsoup

view advisory published 2026-01-19

Security update for libsoup

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-0716US	—	0.38% (31st)	—	2026-01-13
A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, t…
CVE-2026-0719US	—	0.61% (49th)	—	2026-01-08
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely lon…
CVE-2025-14523US	—	0.54% (45th)	—	2025-12-11
A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the…
CVE-2025-12105US	—	0.46% (39th)	—	2025-10-23
A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network…

references

External citations — patches, advisories, analysis.

SUSE Bug 1252555self
SUSE Bug 1254876self
SUSE Bug 1256399self
SUSE Bug 1256418self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20360-1self
SUSE CVE CVE-2025-12105 pageself
SUSE CVE CVE-2025-14523 pageself

remediations (16)

Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan