Red Hat Security Advisory

RHSA-2026:69863

libsoup security update

Released 2026-09-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2026-13220 CVE-2026-15711 · GHSA-w948-qrw5-cffc

HIGH 72

A vulnerability was found in libsoup's WebSocket frame parsing implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +8 CWE-770

TI-2026-13218 CVE-2026-15709 · GHSA-gv2g-7h3v-q5f3

HIGH 72

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +7 CWE-409