Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0886-1

Опубликовано: 12 мар. 2026
Источник: suse-cvrf

Описание

Security update for libsoup2

This update for libsoup2 fixes the following issue:

  • CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
libsoup-2_4-1-2.74.3-150600.4.33.1
libsoup2-devel-2.74.3-150600.4.33.1
libsoup2-lang-2.74.3-150600.4.33.1
typelib-1_0-Soup-2_4-2.74.3-150600.4.33.1
openSUSE Leap 15.6
libsoup-2_4-1-2.74.3-150600.4.33.1
libsoup-2_4-1-32bit-2.74.3-150600.4.33.1
libsoup2-devel-2.74.3-150600.4.33.1
libsoup2-devel-32bit-2.74.3-150600.4.33.1
libsoup2-lang-2.74.3-150600.4.33.1
typelib-1_0-Soup-2_4-2.74.3-150600.4.33.1

Ссылки

Описание

A flaw was found in libsoup's WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using libsoup's WebSocket support with this configuration may be impacted.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:libsoup-2_4-1-2.74.3-150600.4.33.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libsoup2-devel-2.74.3-150600.4.33.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libsoup2-lang-2.74.3-150600.4.33.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:typelib-1_0-Soup-2_4-2.74.3-150600.4.33.1
Ссылки