[ALSA-2026:84586] Important: libsoup security update
Type:
security
Severity:
important
Release date:
2026-10-19
Description:
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libsoup-2.62.3-19.el8_10.aarch64.rpm 0e916c905dea8412b0386c4a9cf785eaff0de13fbc900d94a06bb3cdbbf4abe9
aarch64 libsoup-devel-2.62.3-19.el8_10.aarch64.rpm 286c8404921677fbb94c6966f524a5ee1c1b1e8820412efba49c6cd0673793d7
i686 libsoup-2.62.3-19.el8_10.i686.rpm 122fa172a6a9410f15a0870545a86338be48ed800b9c95cd77f24f410f26b13c
i686 libsoup-devel-2.62.3-19.el8_10.i686.rpm 29d4198143896a0ee5c3fae515f5f48a9074e66f7e3ee9b8228ff0e6b5f2f163
ppc64le libsoup-devel-2.62.3-19.el8_10.ppc64le.rpm 09953cf908bf8847a398aeeaf9ac1030ccebad73197e06e58af116dc15739856
ppc64le libsoup-2.62.3-19.el8_10.ppc64le.rpm 9fc0a5dd274aa7dd7aa2b743c93477cf0c2d05b4ccac39c131ffffa9693af188
s390x libsoup-devel-2.62.3-19.el8_10.s390x.rpm 6abafb20032af30da04533af83cdbf2ecd2bc01276c1fbb7cda2f4ca80778067
s390x libsoup-2.62.3-19.el8_10.s390x.rpm e7f281fce344a048a493b35993c995a83266b3444199b99af9be07658078f8b1
x86_64 libsoup-2.62.3-19.el8_10.x86_64.rpm 8d6e80d325209181bea218770ec12df5fe4352a7429d576719bb615a6e0271a3
x86_64 libsoup-devel-2.62.3-19.el8_10.x86_64.rpm a830951a252a1ec7f118950eb98fb6518b842b69a580ea14a03986b7bd881c3c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.