[CLSA-2026:1792514983] libsoup: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 16:49:54 UTC
Description:
- CVE-2026-102557, CVE-2026-102559: cap WebSocket message reassembly and outgoing frames at the GByteArray size limit - CVE-2026-102558: cap incoming WebSocket frame payloads at the receive buffer limit - CVE-2026-102556: emit the WebSocket pong signal with a GBytes - CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest
Updated packages:
  • libsoup-2.62.2-2.0.13.el7.tuxcare.els2.aarch64.rpm
    sha:cc4b5e7949bbc8788240bef84627a1370301a27df97433b03916f281faa84a47
  • libsoup-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
    sha:39e7e93b5692d0802a3220d0163a1673c90d89cb6b05cd6504a6308e494fd057
  • libsoup-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
    sha:933ae727cf64e11ebfbab5068bd0adf38b796784c0586440d53125f1a9a0d728
  • libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.aarch64.rpm
    sha:101efd0f25d7116b68655ccbe60da486023c289ed7f175f5add72d5529a81264
  • libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
    sha:3ad90df328985a5214bb55b3e8121924edf34d1fba910b6e94b5b817eb70d8fa
  • libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
    sha:7d109c9f699966e291aef07367a775f53af451f3c09a7ae9e9d33a4ed7662484
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.