[ALSA-2026:83384] Important: libsoup security update
Type:
security
Severity:
important
Release date:
2026-10-15
Description:
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libsoup-devel-2.72.0-16.el9_8.8.aarch64.rpm 29c7d76ee4e377f448717b218150ee653d02eee04897d3b3bc1420badfa348a1
aarch64 libsoup-2.72.0-16.el9_8.8.aarch64.rpm bc90ceb5976f8ca56090512814342b8a13fea965641eebb0d370f4c971992eae
i686 libsoup-devel-2.72.0-16.el9_8.8.i686.rpm 28053d52f74b837fd3d71c4c1c77c45a1a33ddb597210cf9832f7338694623f7
i686 libsoup-2.72.0-16.el9_8.8.i686.rpm cbd1e419240f0b3a7041ddf96ee8b59b6697fdbaa6919cce0970d1434e1f8af5
ppc64le libsoup-2.72.0-16.el9_8.8.ppc64le.rpm 8fd190db88afd11dd58161519d7587727eba4429e05e6010c9f4b829a998ded9
ppc64le libsoup-devel-2.72.0-16.el9_8.8.ppc64le.rpm b5698c88b6e909e0b85df441640e9435f79d0981d85ece266f13df2f0f215f61
s390x libsoup-devel-2.72.0-16.el9_8.8.s390x.rpm d1a2745ebf378d518494370a52f5c0e1dd84a60cda3ccd64bcdf7521ea883427
s390x libsoup-2.72.0-16.el9_8.8.s390x.rpm d87af0d0bac8ebe9a5888a80b9700e69aba7d913a5dcd2518b60356b59f5fbaa
x86_64 libsoup-devel-2.72.0-16.el9_8.8.x86_64.rpm 597bc08f9ffcf2e15e4850e75a936597c1b459dccb242fd5677a6e24f4b8d3ff
x86_64 libsoup-2.72.0-16.el9_8.8.x86_64.rpm ce051ec3e616971fb17cddb82c4972eb7bd7c707697b2b9379933b62e8bedb54
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.