Red Hat Security Advisory

RHSA-2026:70598

libsoup security update

Released 2026-09-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) libsoup-devel-2.62.3-2.el8_6.10
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libsoup-devel-2.62.3-2.el8_6.10
Red Hat Enterprise Linux BaseOS AUS (v.8.6) libsoup-2.62.3-2.el8_6.10
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) libsoup-2.62.3-2.el8_6.10

TI-2026-13220 CVE-2026-15711 · GHSA-w948-qrw5-cffc

HIGH 72

A vulnerability was found in libsoup's WebSocket frame parsing implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +8 CWE-770

TI-2026-13218 CVE-2026-15709 · GHSA-gv2g-7h3v-q5f3

HIGH 72

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +7 CWE-409