Description:
The libsoup packages provide an HTTP client and server library for GNOME.
Security Fix(es):
* SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709)
* libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
libsoup-2.72.0-16.el9_8.3.aarch64.rpm |
b36a83e06c9c8ff6d6ae644a6af3a2f695185c9e814f0ff94db7ac5254733a38 |
| aarch64 |
libsoup-devel-2.72.0-16.el9_8.3.aarch64.rpm |
d4dbe70862b4480e8c85f6e6ab670a17871a8e0524eece477d1fb2f7a4175127 |
| i686 |
libsoup-2.72.0-16.el9_8.3.i686.rpm |
14ba6c8b500b406354607171315bd1d069581ef6bb964678dab7c13e1badafde |
| i686 |
libsoup-devel-2.72.0-16.el9_8.3.i686.rpm |
b46aa508829645afc3e3d821981dd1ae24f02f0a657ef54d8a1de35c3996fd41 |
| ppc64le |
libsoup-devel-2.72.0-16.el9_8.3.ppc64le.rpm |
3095bfa055b6c9556c50d2e68b553bf9a106a7c9fe7811d9234d35cd1fd97f61 |
| ppc64le |
libsoup-2.72.0-16.el9_8.3.ppc64le.rpm |
b839c2c8d2c90e2d486f104593b8393cd5135ddad21b6ae12b0833bcd42ca26b |
| s390x |
libsoup-2.72.0-16.el9_8.3.s390x.rpm |
79b82b5797c37934bb18265e00cac4ee7bf0ab5831a94c9e65a4c8c074a2bbcc |
| s390x |
libsoup-devel-2.72.0-16.el9_8.3.s390x.rpm |
c666a7b0239aa073a3242a03060a74f09c27f50e239b3ed898c4f188f4f7bab2 |
| x86_64 |
libsoup-2.72.0-16.el9_8.3.x86_64.rpm |
2c971af87f71195e0a2fa8fda73121795ae77fbe35d754bfbd738be334d63b0a |
| x86_64 |
libsoup-devel-2.72.0-16.el9_8.3.x86_64.rpm |
dc04a76f8ab49f5ac5574d9812b551889ab8ab5d285b85f70047a08fe1208a4e |
