OPENSUSE-SU-2026:12132-1 libsoup-2_4-1-2.74.3-25.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-25.1 package on the GA media of openSUSE Tumbleweed...

RHEL 10 : libsoup3 (RHSA-2026:82728)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82728 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the...

SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:4616-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4616-1 advisory. - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. -...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4631-1 advisory. - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. CVE-2026-102556: Heap...

SUSE-SU-2026:4631-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. - CVE-2026-102556:...

CVE-2026-85197 affecting package libsoup for versions less than 3.4.4-17

CVE-2026-85197 affecting package libsoup for versions less than 3.4.4-17. A patched version of the package is available...

CVE-2026-77014 affecting package libsoup for versions less than 3.4.4-17

CVE-2026-77014 affecting package libsoup for versions less than 3.4.4-17. A patched version of the package is available...

CVE-2026-102556 affecting package libsoup for versions less than 3.4.4-17

CVE-2026-102556 affecting package libsoup for versions less than 3.4.4-17. A patched version of the package is available...

CVE-2026-102558 affecting package libsoup for versions less than 3.4.4-17

CVE-2026-102558 affecting package libsoup for versions less than 3.4.4-17. A patched version of the package is available...

CVE-2026-102560 affecting package libsoup for versions less than 3.4.4-17

CVE-2026-102560 affecting package libsoup for versions less than 3.4.4-17. A patched version of the package is available...

CVE-2026-102557 affecting package libsoup for versions less than 3.4.4-17

CVE-2026-102557 affecting package libsoup for versions less than 3.4.4-17. A patched version of the package is available...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. CVE-2026-102556: Heap...

SUSE-SU-2026:4616-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak bsc1271448. - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding bsc1283299. - CVE-2026-102556:...

TencentOS Server 3: libsoup (TSSA-2026:1128)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1128 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2026-4063)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked...

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2026-3212)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3212 advisory. A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-4248)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked...

Medium: libsoup

Issue Overview: OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via processframe leads to Undefined Behavior CVE-2026-0716 The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving...

Important: libsoup

Issue Overview: A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API ca...