Описание
Security update for libsoup
This update for libsoup fixes the following issue:
- CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libsoup-2_4-1-2.62.2-5.40.1
libsoup-2_4-1-32bit-2.62.2-5.40.1
libsoup-devel-2.62.2-5.40.1
libsoup-lang-2.62.2-5.40.1
typelib-1_0-Soup-2_4-2.62.2-5.40.1
Ссылки
- Link for SUSE-SU-2026:1004-1
- E-Mail link for SUSE-SU-2026:1004-1
- SUSE Security Ratings
- SUSE Bug 1256418
- SUSE CVE CVE-2026-0716 page
Описание
A flaw was found in libsoup's WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using libsoup's WebSocket support with this configuration may be impacted.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libsoup-2_4-1-2.62.2-5.40.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libsoup-2_4-1-32bit-2.62.2-5.40.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libsoup-devel-2.62.2-5.40.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libsoup-lang-2.62.2-5.40.1
Ссылки
- CVE-2026-0716
- SUSE Bug 1256418