[ALSA-2026:68235] Important: libsoup3 security update
Type:
security
Severity:
important
Release date:
2026-09-17
Description:
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709) * libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711) * libsoup: libsoup: Heap use-after-free in libsoup HTTP/2 client on_data_read() via GOAWAY during body upload (CVE-2026-85197) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libsoup3-3.6.5-3.el10_2.14.aarch64.rpm 3213a067c7a317dc7cfbe812b5ee7fd6aba075c42b0d650de04f4c6ba240df6b
aarch64 libsoup3-devel-3.6.5-3.el10_2.14.aarch64.rpm 9e197aac5df885fbeb12d07f6c2fcc6ae84cf189e41b8b3994cc707ecaa68e59
noarch libsoup3-doc-3.6.5-3.el10_2.14.noarch.rpm 6bf3be055b11065a25d7112069d761fb27c69f94e9c38e76b683116273bd2f16
ppc64le libsoup3-3.6.5-3.el10_2.14.ppc64le.rpm c422e5b216c60b01d4398d7bc437c8d9c3e1b643faf1261cd3796b9514abaf97
ppc64le libsoup3-devel-3.6.5-3.el10_2.14.ppc64le.rpm d0eb95d23f7bbcc93697fac6a3a0213f0288d50d90a13ad169c653d9df2d48dc
s390x libsoup3-3.6.5-3.el10_2.14.s390x.rpm 0a466d984bc061307a8322919d15e0228608293a94f1b5433795cca96a284b93
s390x libsoup3-devel-3.6.5-3.el10_2.14.s390x.rpm 749c5a28094c0da32218397baa581b6514b75fa0a5e0b1a6112f92c53f727123
x86_64 libsoup3-devel-3.6.5-3.el10_2.14.x86_64.rpm 93755f51395355a11709fa71032be7df0079607f1435bbafd22c15527964a7a6
x86_64 libsoup3-3.6.5-3.el10_2.14.x86_64.rpm e43c61afd2cec9b094b5cd3551aee1fc724eeaa359a9830ad4ca6ffda7302920
x86_64_v2 libsoup3-3.6.5-3.el10_2.14.x86_64_v2.rpm 521735ddbd5d01b0730b728d8b4ea920da280a7c37dc43e424e77acc2ab9a79c
x86_64_v2 libsoup3-devel-3.6.5-3.el10_2.14.x86_64_v2.rpm e6e02037fb4284d54531a539bedf6f07494b63481e6f17dedc6f197679093d09
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.