vulnerability

SUSE: CVE-2026-0719: SUSE Linux Security Advisory

Severity
9
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:C)
Published
Jan 19, 2026
Added
Jan 23, 2026
Modified
Feb 9, 2026

Description

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk.

Solutions

suse-upgrade-libsoup-2_4-1suse-upgrade-libsoup-2_4-1-32bitsuse-upgrade-libsoup-3_0-0suse-upgrade-libsoup-3_0-0-32bitsuse-upgrade-libsoup-develsuse-upgrade-libsoup-devel-32bitsuse-upgrade-libsoup-langsuse-upgrade-libsoup2-develsuse-upgrade-libsoup2-devel-32bitsuse-upgrade-libsoup2-langsuse-upgrade-typelib-1_0-soup-2_4suse-upgrade-typelib-1_0-soup-3_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.