SUSE-SU-2026:20445-1

SUSE-SU-2026:20445-1 · Security update for libsoup

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow (bsc#1257598).

Fix available

Published

2026-02-16T14:21:49Z

Updated

2026-03-23T04:52:55.834664Z

Stack: system

Check your server →