SUSE-SU-2026:4690-1
SUSE-SU-2026:4690-1 · Security update for libsoup
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). - CVE-2026-66339: proxy credentials leak to destination server via `Proxy-Authorization` header in CONNECT tunnels (bsc#1273156). - CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). - CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). - CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). - CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
Fuentes originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20264690-1/
- https://bugzilla.suse.com/1271401
- https://bugzilla.suse.com/1271446
- https://bugzilla.suse.com/1271448
- https://bugzilla.suse.com/1271449
- https://bugzilla.suse.com/1272195
- https://bugzilla.suse.com/1273156
- https://bugzilla.suse.com/1283300
- https://bugzilla.suse.com/1283301
- https://bugzilla.suse.com/1283302
- https://bugzilla.suse.com/1283303
- https://bugzilla.suse.com/1283831
- https://www.suse.com/security/cve/CVE-2026-0716
- https://www.suse.com/security/cve/CVE-2026-102556
- https://www.suse.com/security/cve/CVE-2026-102557
- https://www.suse.com/security/cve/CVE-2026-102558
- https://www.suse.com/security/cve/CVE-2026-102559
- https://www.suse.com/security/cve/CVE-2026-103399
- https://www.suse.com/security/cve/CVE-2026-12478
- https://www.suse.com/security/cve/CVE-2026-12547
- https://www.suse.com/security/cve/CVE-2026-12548
- https://www.suse.com/security/cve/CVE-2026-1539
- https://www.suse.com/security/cve/CVE-2026-15711
- https://osv.dev/vulnerability/SUSE-SU-2026:4690-1