Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0894-1

Опубликовано: 13 мар. 2026
Источник: suse-cvrf

Описание

Security update for libsoup

This update for libsoup fixes the following issue:

  • CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
libsoup-3_0-0-3.4.4-150600.3.42.1
libsoup-devel-3.4.4-150600.3.42.1
libsoup-lang-3.4.4-150600.3.42.1
typelib-1_0-Soup-3_0-3.4.4-150600.3.42.1
openSUSE Leap 15.6
libsoup-3_0-0-3.4.4-150600.3.42.1
libsoup-3_0-0-32bit-3.4.4-150600.3.42.1
libsoup-devel-3.4.4-150600.3.42.1
libsoup-devel-32bit-3.4.4-150600.3.42.1
libsoup-lang-3.4.4-150600.3.42.1
typelib-1_0-Soup-3_0-3.4.4-150600.3.42.1

Ссылки

Описание

A flaw was found in libsoup's WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using libsoup's WebSocket support with this configuration may be impacted.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:libsoup-3_0-0-3.4.4-150600.3.42.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libsoup-devel-3.4.4-150600.3.42.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libsoup-lang-3.4.4-150600.3.42.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:typelib-1_0-Soup-3_0-3.4.4-150600.3.42.1
Ссылки