Red Hat Security Advisory

RHSA-2026:68234

libsoup security update

Released 2026-09-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libsoup-2.72.0-16.el9_8.3, libsoup-devel-2.72.0-16.el9_8.3

TI-2026-13220 CVE-2026-15711 · GHSA-w948-qrw5-cffc

HIGH 72

A vulnerability was found in libsoup's WebSocket frame parsing implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +8 CWE-770

TI-2026-13218 CVE-2026-15709 · GHSA-gv2g-7h3v-q5f3

HIGH 72

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +7 CWE-409