SUSE-SU-2026:0703-1
SUSE-SU-2026:0703-1 · Security update for libsoup
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for libsoup fixes the following issues: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418). - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422). - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information disclosure to remote attackers (bsc#1258170). - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20260703-1/
- https://bugzilla.suse.com/1240751
- https://bugzilla.suse.com/1243422
- https://bugzilla.suse.com/1256418
- https://bugzilla.suse.com/1258120
- https://bugzilla.suse.com/1258170
- https://bugzilla.suse.com/1258508
- https://www.suse.com/security/cve/CVE-2025-32049
- https://www.suse.com/security/cve/CVE-2025-4476
- https://www.suse.com/security/cve/CVE-2026-0716
- https://www.suse.com/security/cve/CVE-2026-2369
- https://www.suse.com/security/cve/CVE-2026-2443
- https://www.suse.com/security/cve/CVE-2026-2708
- https://osv.dev/vulnerability/SUSE-SU-2026:0703-1