Back Linuxsecurity Debian Bullseye 11.0 libcurl Significant TLS Security Flaw DSA-4934
This update for libsoup fixes the following issues: * CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398). * CVE-2026-1539: proxy authentication credentials leaked via the Proxy- Authorization header when handling HTTP redirects (bsc#1257441). * CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request smuggling and potential DoS (bsc#1257597).
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-833=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-833=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-833=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-833=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-833=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-833=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch Read the Full Advisory
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-833=1
* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-833=1
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-833=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-833=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-833=1
zypper in -t patch SUSE-2026-833=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * typelib-1_0-Soup-3_0-3.0.4-150400.3.37.1 * libsoup-debugsource-3.0.4-150400.3.37.1 * libsoup-3_0-0-3.0.4-150400.3.37.1 * libsoup-3_0-0-debuginfo-3.0.4-150400.3.37.1 * libsoup-devel-3.0.4-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-Soup-3_0-3.0.4-150400.3.37.1 * libsoup-debugsource-3.0.4-150400.3.37.1 * libsoup-3_0-0-3.0.4-150400.3.37.1 * libsoup-3_0-0-debuginfo-3.0.4-150400.3.37.1 * libsoup-devel-3.0.4-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-Soup-3_0-3.0.4-150400.3.37.1 * libsoup-debugsource-3.0.4-150400.3.37.1 * Read the Full Advisory
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
* typelib-1_0-Soup-3_0-3.0.4-150400.3.37.1
* libsoup-debugsource-3.0.4-150400.3.37.1
* libsoup-3_0-0-3.0.4-150400.3.37.1
* libsoup-3_0-0-debuginfo-3.0.4-150400.3.37.1
* libsoup-devel-3.0.4-150400.3.37.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
* libsoup-lang-3.0.4-150400.3.37.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
* typelib-1_0-Soup-3_0-3.0.4-150400.3.37.1
* libsoup-debugsource-3.0.4-150400.3.37.1
* libsoup-3_0-0-3.0.4-150400.3.37.1
* libsoup-3_0-0-debuginfo-3.0.4-150400.3.37.1
* libsoup-devel-3.0.4-150400.3.37.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (noarch)
* libsoup-lang-3.0.4-150400.3.37.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* typelib-1_0-Soup-3_0-3.0.4-150400.3.37.1
* libsoup-debugsource-3.0.4-150400.3.37.1
* bsc#1257398 * bsc#1257441 * bsc#1257597 ## References: * * * * * *
*
*
*
*
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
