gpp_maybe Security update for libsoup2

SUSE-SLE-Module-Basesystem-15-SP7-2026-657

This update for libsoup2 fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information disclosure to remote attackers (bsc#1258170). - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

• Release Date
  Feb 26 2026
• References
  Bugzilla: 1240751, 1258120, 1258170, 1258508
  CVEs: CVE-2025-32049, CVE-2026-2369, CVE-2026-2443, CVE-2026-2708
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.27.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.27.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.27.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.27.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.27.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.27.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.27.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.27.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.27.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock rpm

  libsoup2
  HTTP client/server library for GNOME

  2.74.3-150600.4.27.1 lock src

  libsoup2-devel
  HTTP client/server library for GNOME - Development Files

  2.74.3-150600.4.27.1 lock rpm

  libsoup2-lang
  Translations for package libsoup2

  2.74.3-150600.4.27.1 lock rpm

  typelib-1_0-Soup-2_4
  HTTP client/server library for GNOME -- Introspection bindings

  2.74.3-150600.4.27.1 lock rpm