Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 73 articles for you...
100
security advisorymoderateSuSESUSE 12 SP5 libsoup Moderate HTTP Request Smuggling CVE-2026-1801
An update that solves one vulnerability can now be installed.. # Security update for libsoup Announcement ID: SUSE-SU-2026:2702-1 Release Date: 2026-06-30T10:27:36Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2702=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * typelib-1_0-Soup-2_4-2.62.2-5.43.1 * libsoup-2_4-1-32bit-2.62.2-5.43.1 * libsoup-debugsource-2.62.2-5.43.1 * libsoup-2_4-1-2.62.2-5.43.1 * libsoup-2_4-1-debuginfo-2.62.2-5.43.1 * libsoup-2_4-1-debuginfo-32bit-2.62.2-5.43.1 * libsoup-devel-2.62.2-5.43.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * libsoup-lang-2.62.2-5.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 . SUSE releases moderate security update forlibsoup addressing HTTP request smuggling vulnerability CVE-2026-1801.. SUSE Security Update, libsoup, HTTP Request Smuggling, Security Fix, SUSE Advisory. . Severity: moderate. LinuxSecurity.com Team
Jun 30, 2026
•moderate
SuSE
202
security advisorymoderatelibsoupopenSUSE libsoup Moderate HTTP Request Smuggling Vuln 2026-2669-1
An update that solves one vulnerability can now be installed.. # Security update for libsoup Announcement ID: SUSE-SU-2026:2669-1 Release Date: 2026-06-29T05:42:15Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2669=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup-debugsource-3.0.4-150400.3.43.1 * libsoup-3_0-0-3.0.4-150400.3.43.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.43.1 * libsoup-3_0-0-debuginfo-3.0.4-150400.3.43.1 * libsoup-devel-3.0.4-150400.3.43.1 * openSUSE Leap 15.4 (x86_64) * libsoup-devel-32bit-3.0.4-150400.3.43.1 * libsoup-3_0-0-32bit-3.0.4-150400.3.43.1 * libsoup-3_0-0-32bit-debuginfo-3.0.4-150400.3.43.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-3_0-0-64bit-debuginfo-3.0.4-150400.3.43.1 * libsoup-3_0-0-64bit-3.0.4-150400.3.43.1 * libsoup-devel-64bit-3.0.4-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * libsoup-lang-3.0.4-150400.3.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 . Thisupdate for libsoup in openSUSE addresses a moderate severity HTTP request smuggling issue with important fixes included.. libsoup update, http request fix, openSUSE security, SUSE vulnerabilities. . Severity: moderate. LinuxSecurity.com Team
Jun 29, 2026
•moderate
OpenSUSE
100
security advisorymoderateSuSESUSE openSUSE Leap 15.4 Moderate HTTP Smuggling CVE-2026-1801 Patch
An update that solves one vulnerability can now be installed.. # Security update for libsoup Announcement ID: SUSE-SU-2026:2669-1 Release Date: 2026-06-29T05:42:15Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2669=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup-debugsource-3.0.4-150400.3.43.1 * libsoup-3_0-0-3.0.4-150400.3.43.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.43.1 * libsoup-3_0-0-debuginfo-3.0.4-150400.3.43.1 * libsoup-devel-3.0.4-150400.3.43.1 * openSUSE Leap 15.4 (x86_64) * libsoup-devel-32bit-3.0.4-150400.3.43.1 * libsoup-3_0-0-32bit-3.0.4-150400.3.43.1 * libsoup-3_0-0-32bit-debuginfo-3.0.4-150400.3.43.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-3_0-0-64bit-debuginfo-3.0.4-150400.3.43.1 * libsoup-3_0-0-64bit-3.0.4-150400.3.43.1 * libsoup-devel-64bit-3.0.4-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * libsoup-lang-3.0.4-150400.3.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 .Address a moderate security risk in libsoup with this SUSE update for openSUSE Leap 15.4. Action recommended.. SUSE update libsoup security patch HTTP request smuggling. . Severity: moderate. LinuxSecurity.com Team
Jun 29, 2026
•moderate
SuSE
202
security advisorymoderatepatchopenSUSE libsoup2 Important HTTP Request Smuggling CVE-2026-1801
An update that solves one vulnerability can now be installed.. # Security update for libsoup2 Announcement ID: SUSE-SU-2026:2670-1 Release Date: 2026-06-29T05:42:42Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup2 fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2670=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2670=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2670=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2670=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2670=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2670=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * libsoup2-devel-2.74.2-150400.3.37.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * openSUSE Leap 15.4 (x86_64) * libsoup2-devel-32bit-2.74.2-150400.3.37.1 * libsoup-2_4-1-32bit-debuginfo-2.74.2-150400.3.37.1 * libsoup-2_4-1-32bit-2.74.2-150400.3.37.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup2-devel-64bit-2.74.2-150400.3.37.1 * libsoup-2_4-1-64bit-2.74.2-150400.3.37.1 * libsoup-2_4-1-64bit-debuginfo-2.74.2-150400.3.37.1 * openSUSE Leap 15.4 (noarch) * libsoup2-lang-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 . # Security update for libsoup2 Announcement ID: SUSE-SU-2026:2670-1 Release Date: 2026-06-29T05:42:4. update, solves, vulnerability, installed, security, libsoup2, announc. . Severity: moderate. LinuxSecurity.com Team
Jun 29, 2026
•moderate
OpenSUSE
100
security advisorymoderateSuSEopenSUSE 15.4 SUSE-SU-2026-2670-1 libsoup2 Moderate HTTP Smuggling
An update that solves one vulnerability can now be installed.. # Security update for libsoup2 Announcement ID: SUSE-SU-2026:2670-1 Release Date: 2026-06-29T05:42:42Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup2 fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2670=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2670=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2670=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2670=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2670=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2670=1 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * libsoup2-devel-2.74.2-150400.3.37.1 * typelib-1_0-Soup-2_4-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * openSUSE Leap 15.4 (x86_64) * libsoup2-devel-32bit-2.74.2-150400.3.37.1 * libsoup-2_4-1-32bit-debuginfo-2.74.2-150400.3.37.1 * libsoup-2_4-1-32bit-2.74.2-150400.3.37.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup2-devel-64bit-2.74.2-150400.3.37.1 * libsoup-2_4-1-64bit-2.74.2-150400.3.37.1 * libsoup-2_4-1-64bit-debuginfo-2.74.2-150400.3.37.1 * openSUSE Leap 15.4 (noarch) * libsoup2-lang-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsoup2-debugsource-2.74.2-150400.3.37.1 * libsoup-2_4-1-2.74.2-150400.3.37.1 * libsoup-2_4-1-debuginfo-2.74.2-150400.3.37.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 . A security update addressing a moderate issue in libsoup2 has been released for openSUSE and SUSE Linux Enterprise. Install now!. libsoup2 security patch, SUSE Linux update, moderate security advisory. . Severity: moderate. LinuxSecurity.com Team
Jun 29, 2026
•moderate
SuSE
100
security advisorymoderateSuSESUSE Libsoup2 Moderate HTTP Request Smuggling Vuln 2026-2654-1
An update that solves one vulnerability can now be installed.. # Security update for libsoup2 Announcement ID: SUSE-SU-2026:2654-1 Release Date: 2026-06-26T12:23:06Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup2 fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2654=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2654=1 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * typelib-1_0-Soup-2_4-2.74.3-150600.4.36.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.36.1 * libsoup-2_4-1-2.74.3-150600.4.36.1 * libsoup2-debugsource-2.74.3-150600.4.36.1 * libsoup2-devel-2.74.3-150600.4.36.1 * openSUSE Leap 15.6 (x86_64) * libsoup-2_4-1-32bit-debuginfo-2.74.3-150600.4.36.1 * libsoup2-devel-32bit-2.74.3-150600.4.36.1 * libsoup-2_4-1-32bit-2.74.3-150600.4.36.1 * openSUSE Leap 15.6 (aarch64_ilp32) *libsoup-2_4-1-64bit-debuginfo-2.74.3-150600.4.36.1 * libsoup-2_4-1-64bit-2.74.3-150600.4.36.1 * libsoup2-devel-64bit-2.74.3-150600.4.36.1 * openSUSE Leap 15.6 (noarch) * libsoup2-lang-2.74.3-150600.4.36.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Soup-2_4-2.74.3-150600.4.36.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.36.1 * libsoup-2_4-1-2.74.3-150600.4.36.1 * libsoup2-debugsource-2.74.3-150600.4.36.1 * libsoup2-devel-2.74.3-150600.4.36.1 * Basesystem Module 15-SP7 (noarch) * libsoup2-lang-2.74.3-150600.4.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 . Update for libsoup2 addresses a moderate threat with CVE-2026-1801 in SUSE systems. Immediate action is recommended.. libsoup2 security update, SUSE patches, moderate threat fixes. . Severity: moderate. LinuxSecurity.com Team
Jun 26, 2026
•moderate
SuSE
202
security advisorymoderateOpenSUSEopenSUSE libsoup2 Moderate HTTP Request Smuggling Fix SUSE-SU-2026-2654-1
An update that solves one vulnerability can now be installed.. # Security update for libsoup2 Announcement ID: SUSE-SU-2026:2654-1 Release Date: 2026-06-26T12:23:06Z Rating: moderate References: * bsc#1257649 Cross-References: * CVE-2026-1801 CVSS scores: * CVE-2026-1801 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1801 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-1801 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libsoup2 fixes the following issue * CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2654=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2654=1 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * typelib-1_0-Soup-2_4-2.74.3-150600.4.36.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.36.1 * libsoup-2_4-1-2.74.3-150600.4.36.1 * libsoup2-debugsource-2.74.3-150600.4.36.1 * libsoup2-devel-2.74.3-150600.4.36.1 * openSUSE Leap 15.6 (x86_64) * libsoup-2_4-1-32bit-debuginfo-2.74.3-150600.4.36.1 * libsoup2-devel-32bit-2.74.3-150600.4.36.1 * libsoup-2_4-1-32bit-2.74.3-150600.4.36.1 * openSUSE Leap 15.6 (aarch64_ilp32) *libsoup-2_4-1-64bit-debuginfo-2.74.3-150600.4.36.1 * libsoup-2_4-1-64bit-2.74.3-150600.4.36.1 * libsoup2-devel-64bit-2.74.3-150600.4.36.1 * openSUSE Leap 15.6 (noarch) * libsoup2-lang-2.74.3-150600.4.36.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Soup-2_4-2.74.3-150600.4.36.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.36.1 * libsoup-2_4-1-2.74.3-150600.4.36.1 * libsoup2-debugsource-2.74.3-150600.4.36.1 * libsoup2-devel-2.74.3-150600.4.36.1 * Basesystem Module 15-SP7 (noarch) * libsoup2-lang-2.74.3-150600.4.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1801.html * https://bugzilla.suse.com/show_bug.cgi?id=1257649 . # Security update for libsoup2 Announcement ID: SUSE-SU-2026:2654-1 Release Date: 2026-06-26T12:23:0. update, solves, vulnerability, installed, security, libsoup2, announc. . Severity: moderate. LinuxSecurity.com Team
Jun 26, 2026
•moderate
OpenSUSE
100
security advisorydenial of serviceSuSESUSE Netty Important HTTP Smuggling Vulnern 2026-2308-1
An update that solves 12 vulnerabilities can now be installed.. # Security update for netty, netty-tcnative Announcement ID: SUSE-SU-2026:2308-1 Release Date: 2026-06-09T08:14:00Z Rating: important References: * bsc#1264350 * bsc#1265243 * bsc#1265245 * bsc#1265246 * bsc#1265272 * bsc#1265273 * bsc#1265277 * bsc#1265279 * bsc#1265280 * bsc#1265292 * bsc#1265294 * bsc#1265318 Cross-References: * CVE-2026-41417 * CVE-2026-42578 * CVE-2026-42579 * CVE-2026-42580 * CVE-2026-42581 * CVE-2026-42582 * CVE-2026-42583 * CVE-2026-42584 * CVE-2026-42585 * CVE-2026-42586 * CVE-2026-42587 * CVE-2026-44248 CVSS scores: * CVE-2026-41417 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-41417 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-41417 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-42578 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42578 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42578 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42579 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-42579 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-42579 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42579 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-42580 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-42580 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42580 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-42581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-42581 ( SUSE ): 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42581 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42581 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-42582 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42582 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42583 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-42583 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42583 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42584 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-42584 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42584 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-42584 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42585 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-42585 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-42585 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42585 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-42586 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-42586 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-42586 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42587 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42587 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-44248 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-44248 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-44248 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-44248 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: *Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for netty, netty-tcnative fixes the following issues * CVE-2026-41417: missing validations leads to HTTP request smuggling and RTSP request injection via start-line injection in `DefaultHttpRequest.setUri()` (bsc#1264350). * CVE-2026-42578: HTTP Header Injection via HttpProxyHandler Disabled Validation in Netty (bsc#1265243). * CVE-2026-42579: DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding (bsc#1265272). * CVE-2026-42580: chunk size parser silently overflows int and enables request smuggling attacks (bsc#1265273). * CVE-2026-42581: TE+CL header coexistence in HTTP/1.0 requests bypasses smuggling sanitization (bsc#1265277). * CVE-2026-42583: resource exhaustion and possible denial of service via `Lz4FrameDecoder` (bsc#1265279). * CVE-2026-42584: improper handling of inboundresponses in `HttpClientCodec` can lead to response desynchronization (bsc#1265280). * CVE-2026-42585: Netty is an asynchronous, event-driven network application framework (bsc#1265292). * CVE-2026-42586: CRLF Injection in Netty Redis Codec Encoder (bsc#1265245). * CVE-2026-42587: HttpContentDecompressor maxAllocation bypass via Content- Encoding: br/zstd/snappy enables decompression bomb DoS (bsc#1265246). * CVE-2026-44248: Netty is an asynchronous, event-driven network application framework (bsc#1265294). * CVE-2026-42582: HTTP/3 QPACK literal unbounded allocation (bsc#1265318). Changes for netty: * Upgrade to upstream version 4.1.133 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-2308=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2308=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2308=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2308=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2308=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2308=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2308=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2308=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2308=1 * SUSELinux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2308=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2308=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2308=1 ## Package List: * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * netty-tcnative-debugsource-2.0.77-150200.3.39.1 * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * netty-4.1.133-150200.4.46.1 * SUSE Package Hub 15 15-SP7 (noarch) * netty-javadoc-4.1.133-150200.4.46.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.77-150200.3.39.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * netty-tcnative-2.0.77-150200.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41417.html *https://www.suse.com/security/cve/CVE-2026-42578.html * https://www.suse.com/security/cve/CVE-2026-42579.html * https://www.suse.com/security/cve/CVE-2026-42580.html * https://www.suse.com/security/cve/CVE-2026-42581.html * https://www.suse.com/security/cve/CVE-2026-42582.html * https://www.suse.com/security/cve/CVE-2026-42583.html * https://www.suse.com/security/cve/CVE-2026-42584.html * https://www.suse.com/security/cve/CVE-2026-42585.html * https://www.suse.com/security/cve/CVE-2026-42586.html * https://www.suse.com/security/cve/CVE-2026-42587.html * https://www.suse.com/security/cve/CVE-2026-44248.html * https://bugzilla.suse.com/show_bug.cgi?id=1264350 * https://bugzilla.suse.com/show_bug.cgi?id=1265243 * https://bugzilla.suse.com/show_bug.cgi?id=1265245 * https://bugzilla.suse.com/show_bug.cgi?id=1265246 * https://bugzilla.suse.com/show_bug.cgi?id=1265272 * https://bugzilla.suse.com/show_bug.cgi?id=1265273 * https://bugzilla.suse.com/show_bug.cgi?id=1265277 * https://bugzilla.suse.com/show_bug.cgi?id=1265279 * https://bugzilla.suse.com/show_bug.cgi?id=1265280 * https://bugzilla.suse.com/show_bug.cgi?id=1265292 * https://bugzilla.suse.com/show_bug.cgi?id=1265294 * https://bugzilla.suse.com/show_bug.cgi?id=1265318 . Critical update for SUSE fixing 12 vulnerabilities in netty and netty-tcnative, addressing security risks.. SUSE netty security update, netty vulnerabilities, important SUSE updates. . Severity: Important. LinuxSecurity.com Team
Jun 09, 2026
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!