Release date:
2026-10-20 02:45:44 UTC
Description:
- CVE-2026-102557, CVE-2026-102559: cap WebSocket message reassembly and
outgoing frames at the GByteArray size limit
- CVE-2026-102558: cap incoming WebSocket frame payloads at the receive
buffer limit
- CVE-2026-102556: emit the WebSocket pong signal with a GBytes
- CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest
Updated packages:
-
libsoup-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
sha:d7b250cc6e95e470c1462cbfb91ab01dc5808711af6fc1f65d04a306508f6325
-
libsoup-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
sha:f76d2b4da1e62f9cb47475685675c3f2bfd0a76eeab8f5c848435b3520b22e83
-
libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
sha:aba85672920bf038cd574efca611d4144ed63e6296a9532323406779d6c3410d
-
libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
sha:bfbd24d6205fd4fa5a10e7bea82415504850d29d5473d09452f13057c8d884d8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
