gpp_maybe Security update for libsoup

SUSE-SLE-Module-Basesystem-15-SP7-2026-690

This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information disclosure to remote attackers (bsc#1258170). - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

• Release Date
  Feb 27 2026
• References
  Bugzilla: 1240751, 1258120, 1258170, 1258508
  CVEs: CVE-2025-32049, CVE-2026-2369, CVE-2026-2443, CVE-2026-2708
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.34.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.34.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.34.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.34.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.34.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.34.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.34.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.34.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.34.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libsoup
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock src

  libsoup-3_0-0
  HTTP client/server library for GNOME

  3.4.4-150600.3.34.1 lock rpm

  libsoup-devel
  HTTP client/server library for GNOME - Development Files

  3.4.4-150600.3.34.1 lock rpm

  libsoup-lang
  Translations for package libsoup

  3.4.4-150600.3.34.1 lock rpm

  typelib-1_0-Soup-3_0
  HTTP client/server library for GNOME -- Introspection bindings

  3.4.4-150600.3.34.1 lock rpm