Release date:
2026-10-20 02:50:10 UTC
Description:
- CVE-2026-102557, CVE-2026-102559: cap WebSocket message reassembly and
outgoing frames at the GByteArray size limit
- CVE-2026-102558: cap incoming WebSocket frame payloads at the receive
buffer limit
- CVE-2026-102556: emit the WebSocket pong signal with a GBytes
- CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest
Updated packages:
-
libsoup-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
sha:a64284681d6da892d468144710888a85e826c3ecdfc9c44b2e4e33f959883dca
-
libsoup-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
sha:72c45c3009f7ab98c5db952170c70962e56aad6beb3801556a65d3e423dd945c
-
libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
sha:d795f75764c68f835c73bbed25693e19f927817fc8f158f6ca10247e6a2d35b0
-
libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
sha:ca2cfcec7df014fa47f3f24e89daa9ed0198d7e544399b07cdd112bf13b9468e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
