File _patchinfo of Package patchinfo.42965
<patchinfo incident="42965"> <!--generated with prepare-update from request 402449--> <issue tracker="bnc" id="1257398">VUL-0: CVE-2026-1467: libsoup,libsoup2: lack of input sanitization can lead to unintended or unauthorized HTTP requests</issue> <issue tracker="bnc" id="1257441">VUL-0: CVE-2026-1539: libsoup,libsoup2: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects</issue> <issue tracker="bnc" id="1257597">VUL-0: CVE-2026-1760: libsoup,libsoup2: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request smuggling and potential DoS</issue> <issue tracker="cve" id="2026-1467"/> <issue tracker="cve" id="2026-1539"/> <issue tracker="cve" id="2026-1760"/> <category>security</category> <rating>important</rating> <packager>JonathanKang</packager> <summary>Security update for libsoup</summary> <description>This update for libsoup fixes the following issues: - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects (bsc#1257441). - CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request smuggling and potential DoS (bsc#1257597). </description> </patchinfo>