SUSE-SU-2026:4558-1: libsoup&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 07-10-2026Last modified 08-10-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:4558-1 is a vulnerability in libsoup&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6
CVE-2026-12478CVE-2026-12547CVE-2026-15711CVE-2026-15712CVE-2026-15714CVE-2026-66339

Timeline

  1. 07-10-2026
    PublishedVulnerability first disclosed.
  2. 08-10-2026
    Last modifiedVulnerability information updated.

Description

Security update for libsoup This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). - CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). - CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). - CVE-2026-66339: proxy credentials leak to destination server via `Proxy-Authorization` header in CONNECT tunnels (bsc#1273156).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse3 products
  • libsoup&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 3.4.4-150600.3.56.1
  • libsoup&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 3.4.4-150600.3.56.1
  • libsoup&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6< 3.4.4-150600.3.56.1

1 vendor · 3 products

References

13 links
Show all 13 references