SUSE-SU-2026:20205-1

Security update for libsoup

view advisory published 2026-01-30

Security update for libsoup

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-0716US	—	0.38% (31st)	—	2026-01-13
A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, t…
CVE-2026-0719US	—	0.61% (49th)	—	2026-01-08
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely lon…
CVE-2025-11021US	—	0.64% (50th)	—	2025-09-26
A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with spec…

references

External citations — patches, advisories, analysis.

SUSE Bug 1250562self
SUSE Bug 1256399self
SUSE Bug 1256418self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20205-1self
SUSE CVE CVE-2025-11021 pageself
SUSE CVE CVE-2026-0716 pageself
SUSE CVE CVE-2026-0719 pageself

remediations (12)

Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.6.5-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan