SUSE-SU-2026:20727-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202620727-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20727-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:20727-1
- Upstream
CVE (3)
- CVE-2026-1467
- CVE-2026-1539
- CVE-2026-1760
- Related
- Published
- 2026-03-13T09:07:20Z
- Modified
- 2026-03-24T23:10:54Z
- Summary
- Security update for libsoup
- Details
-
This update for libsoup fixes the following issues:
- CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398).
- CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects (bsc#1257441).
- CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request smuggling and potential DoS (bsc#1257597).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202620727-1/
- https://bugzilla.suse.com/1257398
- https://bugzilla.suse.com/1257441
- https://bugzilla.suse.com/1257597
- https://www.suse.com/security/cve/CVE-2026-1467
- https://www.suse.com/security/cve/CVE-2026-1539
- https://www.suse.com/security/cve/CVE-2026-1760