Red Hat Security Advisory

RHSA-2026:71389

libsoup3 security update

Released 2026-09-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) libsoup3-3.6.5-3.el10_0.17, libsoup3-devel-3.6.5-3.el10_0.17
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libsoup3-doc-3.6.5-3.el10_0.17

TI-2026-13220 CVE-2026-15711 · GHSA-w948-qrw5-cffc

HIGH 72

A vulnerability was found in libsoup's WebSocket frame parsing implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +8 CWE-770

TI-2026-13218 CVE-2026-15709 · GHSA-gv2g-7h3v-q5f3

HIGH 72

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00883 Published 2026-07-14 Partial fix · 3.6.5-3.el10_2.14, 3.6.5-3.el10_0.17 +7 CWE-409