openSUSE-SU-2026:20186-1

openSUSE-SU-2026:20186-1 · Security update for libsoup

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow (bsc#1257598).

Fix available

Published

2026-02-06T11:13:48Z

Updated

2026-03-23T04:54:46.956135Z

Stack: system

Check your server →