Описание
Security update for libsoup2
This update for libsoup2 fixes the following issues:
- CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
Changes for libsoup2:
- tld-test: update after changes in the public suffix list: '*.bd' is no longer in the public suffix list so let's use '.jm' instead.
- Increase test timeout for all arches except x86_64 and run tests again should they fail the first time, the testsuite is flaky.
- Increase test timeout on s390x. The http2-body-stream test can be slow and sometimes times out in our builds.
- fix an intermittent test failure (glgo#GNOME/libsoup#399).
- Fix build with libxml2-2.12.0 and clang-17.
- Add upstream bug fixes:
- lib: Add g_task_set_source_tag() everywhere
- lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires and macro.
- Use ldconfig_scriptlets macro for post(un) handling.
- Update to version 2.74.3:
- Add missing g-i annotations to
soup_address_get_sockaddr()andsoup_socket_read_until(). - Add missing
externwhen building on Windows. - Update libxml2 fallback for meson wrap.
- Improvements when using libsoup with meson wraps.
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Micro 5.4
SUSE Linux Enterprise Micro 5.5
SUSE Linux Enterprise Server 15 SP4-LTSS
SUSE Linux Enterprise Server 15 SP5-LTSS
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
Ссылки
- Link for SUSE-SU-2026:3936-1
- E-Mail link for SUSE-SU-2026:3936-1
- SUSE Security Ratings
- SUSE Bug 1241686
- SUSE Bug 1241688
- SUSE Bug 1254876
- SUSE Bug 1272196
- SUSE CVE CVE-2025-14523 page
- SUSE CVE CVE-2025-46420 page
- SUSE CVE CVE-2025-46421 page
- SUSE CVE CVE-2026-12548 page
Описание
A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend interprets it as destined for another host. This discrepancy enables request-smuggling style attacks, cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.
Затронутые продукты
Ссылки
- CVE-2025-14523
- SUSE Bug 1254876
- SUSE Bug 1259907
- SUSE Bug 1272026
Описание
A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.
Затронутые продукты
Ссылки
- CVE-2025-46420
- SUSE Bug 1241686
Описание
A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.
Затронутые продукты
Ссылки
- CVE-2025-46421
- SUSE Bug 1241688
Описание
A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.
Затронутые продукты
Ссылки
- CVE-2026-12548
- SUSE Bug 1272196