Release date:
2026-10-16 16:55:37 UTC
Description:
- Rebase onto vendor 2.56.0-6.amzn2.0.10, which fixes CVE-2026-0716,
CVE-2026-12478, CVE-2026-12547, CVE-2026-12548, CVE-2026-12549,
CVE-2026-15714, CVE-2026-66339, CVE-2026-77014, CVE-2026-77680,
CVE-2026-102557, CVE-2026-102558, CVE-2026-102559 and CVE-2026-103399,
and corrects the test code of the CVE-2025-4948, CVE-2025-32907,
CVE-2025-32914 and CVE-2026-0719 patches for the libsoup 2.x API
- Kept the TuxCare fix in libsoup/soup-cookie-jar.c that stops the cookie jar
from attaching a Cookie header to a CONNECT request sent to a HTTP proxy for
a HTTPS destination
- Dropped the two TuxCare duplicates of patch files the vendor now ships under
the same names; the vendor's copies are taken and carry the same fixes for
the buffer-length underflow in soup_filter_input_stream_read_until() and for
the strict chunk-size parsing in libsoup/soup-body-input-stream.c
Updated packages:
-
libsoup-2.56.0-6.amzn2.0.10.tuxcare.els1.aarch64.rpm
sha:b5d60b9bb2e39bd94e5dba591b76319a033d62b2cd8845884f182ba3898257d5
-
libsoup-2.56.0-6.amzn2.0.10.tuxcare.els1.i686.rpm
sha:98ebe0ef8e7a5d8e900d0522abb8050186532e248c3a02b514a7afa2d9f78ce7
-
libsoup-2.56.0-6.amzn2.0.10.tuxcare.els1.x86_64.rpm
sha:25c00bcbdea778681f5d1442fd4225856d77bfba2eb443a988f7ba684751c1d8
-
libsoup-devel-2.56.0-6.amzn2.0.10.tuxcare.els1.aarch64.rpm
sha:9f71ef56e122dc298675cc3c1258d0158ce3f6db4ca858febc021e147a1d6105
-
libsoup-devel-2.56.0-6.amzn2.0.10.tuxcare.els1.i686.rpm
sha:bee84916f991e4f23c85343d270b162a0169e7e9561727ef02efcf90cebf3807
-
libsoup-devel-2.56.0-6.amzn2.0.10.tuxcare.els1.x86_64.rpm
sha:d64700179792ad4d3dcd129f0cc448b28dedbff2a95c95dfc4cdf35508b4951c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
