SUSE CVE-2026-3099

A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does not properly track issued nonces or enforce the required incrementing nonce-count nc attribute. This vulnerability allows a remote attacker to capture a single valid...

libsoup-2_4-1-2.74.3-17.1 on GA media (moderate)

libsoup-24-1-2.74.3-17.1 on GA media Announcement ID: openSUSE-SU-2026:10246-1 Rating: moderate Cross-References: CVE-2026-2708 CVSS scores: CVE-2026-2708 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N CVE-2026-2708 SUSE : 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA...

CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12

CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1536 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1536 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2025-14523 affecting package libsoup for versions less than 3.4.4-12

CVE-2025-14523 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1761 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1761 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1467 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1467 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

CVE-2026-1801 affecting package libsoup for versions less than 3.4.4-12

CVE-2026-1801 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...

Reusing a Nonce, Key Pair in Encryption

Overview Affected versions of this package are vulnerable to Reusing a Nonce, Key Pair in Encryption in the server-side digest authentication implementation. An attacker can gain unauthorized access by replaying previously captured authentication data. Remediation There is no fixed version for...

Linux Distros Unpatched Vulnerability : CVE-2026-3099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does not properly track issued nonces or...

OPENSUSE-SU-2026:10246-1 libsoup-2_4-1-2.74.3-17.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-17.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10245-1 libsoup-3_0-0-3.6.6-1.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed...

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

...

CLSA-2026-1771519663 libsoup: Fix of 2 CVEs

CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soupfilterinputstreamreaduntil - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum with excessively long passwords...

SUSE: Security Advisory (SUSE-SU-2026:0579-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:0579-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0579-1 advisory. - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection bsc1257440. -...

CLSA-2026-1771519029 libsoup: Fix of 2 CVEs

CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soupfilterinputstreamreaduntil - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum with excessively long passwords...

CLSA-2026-1771518763 libsoup: Fix of 2 CVEs

CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soupfilterinputstreamreaduntil - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum with excessively long passwords...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection bsc1257440. CVE-2026-1761: Check length of bytes read in soupfilterinputstreamreaduntil to avoid a stack-based buffer overflow...