Red Hat Security Advisory

RHSA-2026:68235

libsoup3 security update

Released 2026-09-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) libsoup3-3.6.5-3.el10_2.14, libsoup3-devel-3.6.5-3.el10_2.14
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libsoup3-doc-3.6.5-3.el10_2.14

TI-2026-13220 CVE-2026-15711 · GHSA-w948-qrw5-cffc

HIGH 72

A vulnerability was found in libsoup's WebSocket frame parsing implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +8 CWE-770

TI-2026-13218 CVE-2026-15709 · GHSA-gv2g-7h3v-q5f3

HIGH 72

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +7 CWE-409

TI-2026-58528 CVE-2026-85197 · GHSA-pq26-x6qp-8qr7

HIGH 66

A flaw was found in libsoup.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00335 Published 2026-09-04 Fixed in 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.18 CWE-416