ALSA-2026:83384
Important: libsoup security update
Published Oct 15, 2026 · updated Oct 15, 2026
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · OSV.dev
Detected
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: lib
Oct 15, 2026 · OSV.dev
Fix available
libsoup fixed in 2.72.0-16.el9_8.8; libsoup-devel fixed in 2.72.0-16.el9_8.8
Oct 15, 2026 · OSV.dev
Fix available
libsoup fixed in 2.72.0-16.el9_8.8
Oct 15, 2026 · OSV.dev
Fix available
libsoup-devel fixed in 2.72.0-16.el9_8.8
Oct 15, 2026 · OSV.dev
Updated
The libsoup packages provide an HTTP client and server library for GNOME. Security Fix(es): * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: lib
Affected
- AlmaLinux:9 libsoup0 → 2.72.0-16.el9_8.8
- AlmaLinux:9 libsoup-devel0 → 2.72.0-16.el9_8.8