Security update for libsoup
Security update for libsoup
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-2708US | medium5.3 | — | ||
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditional… | ||||
| CVE-2026-2369US | critical9.1 | — | ||
A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker… | ||||
| CVE-2026-2443US | medium5.3 | — | ||
A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate reque… | ||||
| CVE-2026-1761US | — | — | ||
A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote a… | ||||
| CVE-2026-1760US | — | — | ||
A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connecti… | ||||
| CVE-2026-1539US | medium5.8 | — | ||
A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes th… | ||||
| CVE-2026-1536US | medium5.3 | — | ||
A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (Carriage Return Line Feed) sequences into the header value. T… | ||||
| CVE-2026-1467US | medium5.3 | — | ||
A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the librar… | ||||
| CVE-2025-32049US | — | — | ||
A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS). | ||||
references
External citations — patches, advisories, analysis.
- SUSE Bug 1240751self
- SUSE Bug 1257398self
- SUSE Bug 1257440self
- SUSE Bug 1257441self
- SUSE Bug 1257597self
- SUSE Bug 1257598self
- SUSE Bug 1258120self
- SUSE Bug 1258170self
remediations (36)
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.aarch64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.ppc64le as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.s390x as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
- Fixedlibsoup-3_0-0-0:3.4.4-slfo.1.1_7.1.x86_64 as component of SUSE Linux Micro 6.1
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan