gpp_maybe Security update for libsoup

SUSE-SLE-Micro-6.0-601

This update for libsoup fixes the following issues: - CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion. (bsc#1252555) - CVE-2025-32049: Fixed a Denial of Service attack to websocket server. (bsc#1240751) - CVE-2026-2443: Fixed an out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information disclosure to remote attackers. (bsc#1258170) - CVE-2026-2369: Fixed a buffer overread due to integer underflow when handling zero-length resources. (bsc#1258120) - CVE-2026-2708: Fixed HTTP request smuggling via duplicate Content-Length headers. (bsc#1258508)

• Release Date
  Mar 2 2026
• References
  Bugzilla: 1240751, 1252555, 1258120, 1258170, 1258508
  CVEs: CVE-2025-12105, CVE-2025-32049, CVE-2026-2369, CVE-2026-2443, CVE-2026-2708
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64

• Packages
  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.2-13.1 lock rpm

SUSE Linux Micro 6.0 s390x

• Packages
  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.2-13.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.2-13.1 lock rpm