gpp_maybe Security update for libsoup

SUSE-SLE-Micro-6.1-379

This update for libsoup fixes the following issues: - CVE-2025-14523: flaw in HTTP header handling can lead to host header parsing discrepancy between servers and proxies and allow for request smuggling, cache poisoning and bypass of access controls (bsc#1254876). - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion can lead to undefined behavior or crash (bsc#1252555). - CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418). - CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399).

Release Date

Jan 19 2026
References

Bugzilla: 1252555, 1254876, 1256399, 1256418
CVEs: CVE-2025-12105, CVE-2025-14523, CVE-2026-0716, CVE-2026-0719
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 ppc64le

Packages

libsoup-3_0-0
HTTP client/server library for GNOME

3.4.4-slfo.1.1_6.1 lock rpm

SUSE Linux Micro 6.1 aarch64

Packages

libsoup-3_0-0
HTTP client/server library for GNOME

3.4.4-slfo.1.1_6.1 lock rpm

SUSE Linux Micro 6.1 s390x

Packages

libsoup-3_0-0
HTTP client/server library for GNOME

3.4.4-slfo.1.1_6.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

libsoup-3_0-0
HTTP client/server library for GNOME

3.4.4-slfo.1.1_6.1 lock rpm