SUSE-SU-2026:20529-1

Security update for libsoup

view advisory published 2026-03-02

Security update for libsoup

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-2708US	medium5.3	0.32% (25th)	—	2026-04-23
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditional…
CVE-2026-2369US	critical9.1	0.43% (37th)	—	2026-03-19
A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker…
CVE-2026-2443US	medium5.3	0.49% (42nd)	—	2026-02-13
A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate reque…
CVE-2025-12105US	—	0.46% (39th)	—	2025-10-23
A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network…
CVE-2025-32049US	—	0.89% (59th)	—	2025-04-03
A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

references

External citations — patches, advisories, analysis.

SUSE Bug 1240751self
SUSE Bug 1252555self
SUSE Bug 1258120self
SUSE Bug 1258170self
SUSE Bug 1258508self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20529-1self
SUSE CVE CVE-2025-12105 pageself

remediations (15)

Fixedlibsoup-3_0-0-0:3.4.2-13.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsoup-3_0-0-0:3.4.2-13.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan