gpp_maybe Security update for libsoup

SUSE-SUSE-MicroOS-5.2-2026-792

This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects (bsc#1257441). - CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request smuggling and potential DoS (bsc#1257597).

• Release Date
  Mar 4 2026
• References
  Bugzilla: 1257398, 1257441, 1257597
  CVEs: CVE-2026-1467, CVE-2026-1539, CVE-2026-1760
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  libsoup
  HTTP client/server library for GNOME

  2.68.4-150200.4.33.1 lock src

  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.68.4-150200.4.33.1 lock rpm

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  libsoup
  HTTP client/server library for GNOME

  2.68.4-150200.4.33.1 lock src

  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.68.4-150200.4.33.1 lock rpm

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  libsoup
  HTTP client/server library for GNOME

  2.68.4-150200.4.33.1 lock src

  libsoup-2_4-1
  HTTP client/server library for GNOME

  2.68.4-150200.4.33.1 lock rpm