[ALSA-2026:83618] Important: libsoup3 security update
Type:
security
Severity:
important
Release date:
2026-10-16
Description:
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding (CVE-2026-102555) * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libsoup3-3.6.5-3.el10_2.20.aarch64.rpm 15a5a9d8dd14689d79e8e254fa19cac4a192468b268654cf3239e9df44aa9693
aarch64 libsoup3-devel-3.6.5-3.el10_2.20.aarch64.rpm d932a149f683095d3f8ae0a1581a8911e813b798790452e20e53f869320230c7
noarch libsoup3-doc-3.6.5-3.el10_2.20.noarch.rpm 9d4cc65df520c8f1871282fe1657d0f3911326d504e01432d28ed70526e6b9d0
ppc64le libsoup3-3.6.5-3.el10_2.20.ppc64le.rpm 4e6113f48de0349fb3b06512886c81ed9bb459e182c00d9c167822bcceba8888
ppc64le libsoup3-devel-3.6.5-3.el10_2.20.ppc64le.rpm d05f0f8af2536db7d6f4ade4474f163b61b3196550910432fc242c2243f31fd5
s390x libsoup3-3.6.5-3.el10_2.20.s390x.rpm bfea31dae66e6e4f59cbd3ac1dfe83773969422cc40fd088d3d1d581668d0c41
s390x libsoup3-devel-3.6.5-3.el10_2.20.s390x.rpm e9b50ebb405a339ac221aabe30a9e993544d452f352513a462548ae8646a565b
x86_64 libsoup3-devel-3.6.5-3.el10_2.20.x86_64.rpm 0c99a73c7a8014cde2d0335ce054f30091086b75ba8432ff46699001f1827b35
x86_64 libsoup3-3.6.5-3.el10_2.20.x86_64.rpm 7934f68a4136ab8848740b047d86e009869a61bfc0a28fcdceb34aedb0f7077f
x86_64_v2 libsoup3-devel-3.6.5-3.el10_2.20.x86_64_v2.rpm 349dfa681a699f4f1d0a95158894a7df0396bdb975efd8985d2d15adb9009a50
x86_64_v2 libsoup3-3.6.5-3.el10_2.20.x86_64_v2.rpm 7326ff352e61a4b5110073a0a176c0e97f7df77be82a69078cceb6a1f130c34c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.