RHSA-2026:98560

Vulnerability from csaf_redhat - Published: 2026-11-11 12:47 - Updated: 2026-11-11 19:06
Summary
Red Hat Security Advisory: libsoup3 security update
Severity
Important
Notes
Topic: An update for libsoup3 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago. Security Fix(es): * SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709) * libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711) * libsoup: libsoup: Heap use-after-free in libsoup HTTP/2 client on_data_read() via GOAWAY during body upload (CVE-2026-85197) * libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding (CVE-2026-102555) * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556) * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557) * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558) * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559) * libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-15709

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch —
Vendor Fix fix
Workaround
Threats
Impact Moderate
CVE-2026-15711

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames (e.g., PING, PONG, CLOSE) contain a payload of 125 bytes or less. A remote, unauthenticated attacker can exploit this by sending a non-compliant, oversized control frame. Because the parser handles this protocol violation improperly instead of throwing an immediate connection termination error, it triggers a internal processing crash, resulting in a remote denial of service (DoS) for applications utilizing libsoup WebSockets.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Moderate
CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution.

7.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-416 - Use After Free
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
CVE-2026-102555

A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
CVE-2026-102556

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-843 - Access of Resource Using Incompatible Type
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
CVE-2026-102557

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
CVE-2026-102558

A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
CVE-2026-102559

A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
CVE-2026-102560

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 18 products, the same list as for CVE-2026-15709
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:98560 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2499922 external
https://bugzilla.redhat.com/show_bug.cgi?id=2499924 external
https://bugzilla.redhat.com/show_bug.cgi?id=2528425 external
https://bugzilla.redhat.com/show_bug.cgi?id=2543224 external
https://bugzilla.redhat.com/show_bug.cgi?id=2543229 external
https://bugzilla.redhat.com/show_bug.cgi?id=2543231 external
https://bugzilla.redhat.com/show_bug.cgi?id=2543274 external
https://bugzilla.redhat.com/show_bug.cgi?id=2543285 external
https://bugzilla.redhat.com/show_bug.cgi?id=2543296 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-15709 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499922 external
https://www.cve.org/CVERecord?id=CVE-2026-15709 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15709 external
https://gitlab.gnome.org/GNOME/libsoup/-/issues/511 external
https://access.redhat.com/security/cve/CVE-2026-15711 self
https://bugzilla.redhat.com/show_bug.cgi?id=2499924 external
https://www.cve.org/CVERecord?id=CVE-2026-15711 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15711 external
https://gitlab.gnome.org/GNOME/libsoup/-/issues/515 external
https://access.redhat.com/security/cve/CVE-2026-85197 self
https://bugzilla.redhat.com/show_bug.cgi?id=2528425 external
https://www.cve.org/CVERecord?id=CVE-2026-85197 external
https://nvd.nist.gov/vuln/detail/CVE-2026-85197 external
https://gitlab.gnome.org/GNOME/libsoup/-/work_items/552 external
https://access.redhat.com/security/cve/CVE-2026-102555 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543224 external
https://www.cve.org/CVERecord?id=CVE-2026-102555 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102555 external
https://access.redhat.com/security/cve/CVE-2026-102556 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543229 external
https://www.cve.org/CVERecord?id=CVE-2026-102556 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102556 external
https://access.redhat.com/security/cve/CVE-2026-102557 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543231 external
https://www.cve.org/CVERecord?id=CVE-2026-102557 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102557 external
https://access.redhat.com/security/cve/CVE-2026-102558 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543274 external
https://www.cve.org/CVERecord?id=CVE-2026-102558 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102558 external
https://access.redhat.com/security/cve/CVE-2026-102559 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543285 external
https://www.cve.org/CVERecord?id=CVE-2026-102559 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102559 external
https://access.redhat.com/security/cve/CVE-2026-102560 self
https://bugzilla.redhat.com/show_bug.cgi?id=2543296 external
https://www.cve.org/CVERecord?id=CVE-2026-102560 external
https://nvd.nist.gov/vuln/detail/CVE-2026-102560 external
Acknowledgments
Tristan Madani
Sebastián Alba Vives (@Sebasteuo / 0xS4bb1)
Naresh Kandula (Nottiboy_1337)
Hongduo Zhao
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libsoup3 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages.  libsoup uses the Glib main loop and is designed to work well with GTK applications. This enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion, very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who want it), but the SOAP parts were removed long ago.\n\nSecurity Fix(es):\n\n* SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709)\n\n* libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711)\n\n* libsoup: libsoup: Heap use-after-free in libsoup HTTP/2 client on_data_read() via GOAWAY during body upload (CVE-2026-85197)\n\n* libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding (CVE-2026-102555)\n\n* libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556)\n\n* libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557)\n\n* libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558)\n\n* libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559)\n\n* libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:98560",
        "url": "https://access.redhat.com/errata/RHSA-2026:98560"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2499922",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499922"
      },
      {
        "category": "external",
        "summary": "2499924",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499924"
      },
      {
        "category": "external",
        "summary": "2528425",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528425"
      },
      {
        "category": "external",
        "summary": "2543224",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543224"
      },
      {
        "category": "external",
        "summary": "2543229",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543229"
      },
      {
        "category": "external",
        "summary": "2543231",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543231"
      },
      {
        "category": "external",
        "summary": "2543274",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543274"
      },
      {
        "category": "external",
        "summary": "2543285",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543285"
      },
      {
        "category": "external",
        "summary": "2543296",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543296"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98560.json"
      }
    ],
    "title": "Red Hat Security Advisory: libsoup3 security update",
    "tracking": {
      "current_release_date": "2026-11-11T19:06:43+00:00",
      "generator": {
        "date": "2026-11-11T19:06:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2026:98560",
      "initial_release_date": "2026-11-11T12:47:04+00:00",
      "revision_history": [
        {
          "date": "2026-11-11T12:47:04+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-11T12:47:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-11T19:06:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
                  "product_id": "CRB-10.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsoup3-doc-0:3.6.6-1.el10_3.9.noarch",
                "product": {
                  "name": "libsoup3-doc-0:3.6.6-1.el10_3.9.noarch",
                  "product_id": "libsoup3-doc-0:3.6.6-1.el10_3.9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-doc@3.6.6-1.el10_3.9?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsoup3-0:3.6.6-1.el10_3.9.src",
                "product": {
                  "name": "libsoup3-0:3.6.6-1.el10_3.9.src",
                  "product_id": "libsoup3-0:3.6.6-1.el10_3.9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3@3.6.6-1.el10_3.9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsoup3-0:3.6.6-1.el10_3.9.aarch64",
                "product": {
                  "name": "libsoup3-0:3.6.6-1.el10_3.9.aarch64",
                  "product_id": "libsoup3-0:3.6.6-1.el10_3.9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3@3.6.6-1.el10_3.9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
                "product": {
                  "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
                  "product_id": "libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-devel@3.6.6-1.el10_3.9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
                "product": {
                  "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
                  "product_id": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debugsource@3.6.6-1.el10_3.9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
                "product": {
                  "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
                  "product_id": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debuginfo@3.6.6-1.el10_3.9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
                "product": {
                  "name": "libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_id": "libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3@3.6.6-1.el10_3.9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
                "product": {
                  "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_id": "libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-devel@3.6.6-1.el10_3.9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
                "product": {
                  "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_id": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debugsource@3.6.6-1.el10_3.9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
                "product": {
                  "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_id": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debuginfo@3.6.6-1.el10_3.9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsoup3-0:3.6.6-1.el10_3.9.s390x",
                "product": {
                  "name": "libsoup3-0:3.6.6-1.el10_3.9.s390x",
                  "product_id": "libsoup3-0:3.6.6-1.el10_3.9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3@3.6.6-1.el10_3.9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
                "product": {
                  "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
                  "product_id": "libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-devel@3.6.6-1.el10_3.9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
                "product": {
                  "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
                  "product_id": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debugsource@3.6.6-1.el10_3.9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
                "product": {
                  "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
                  "product_id": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debuginfo@3.6.6-1.el10_3.9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libsoup3-0:3.6.6-1.el10_3.9.x86_64",
                "product": {
                  "name": "libsoup3-0:3.6.6-1.el10_3.9.x86_64",
                  "product_id": "libsoup3-0:3.6.6-1.el10_3.9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3@3.6.6-1.el10_3.9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
                "product": {
                  "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
                  "product_id": "libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-devel@3.6.6-1.el10_3.9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
                "product": {
                  "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
                  "product_id": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debugsource@3.6.6-1.el10_3.9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
                "product": {
                  "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
                  "product_id": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libsoup3-debuginfo@3.6.6-1.el10_3.9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-0:3.6.6-1.el10_3.9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64"
        },
        "product_reference": "libsoup3-0:3.6.6-1.el10_3.9.aarch64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-0:3.6.6-1.el10_3.9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le"
        },
        "product_reference": "libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-0:3.6.6-1.el10_3.9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x"
        },
        "product_reference": "libsoup3-0:3.6.6-1.el10_3.9.s390x",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-0:3.6.6-1.el10_3.9.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src"
        },
        "product_reference": "libsoup3-0:3.6.6-1.el10_3.9.src",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-0:3.6.6-1.el10_3.9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64"
        },
        "product_reference": "libsoup3-0:3.6.6-1.el10_3.9.x86_64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64"
        },
        "product_reference": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le"
        },
        "product_reference": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x"
        },
        "product_reference": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64"
        },
        "product_reference": "libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64"
        },
        "product_reference": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le"
        },
        "product_reference": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x"
        },
        "product_reference": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64"
        },
        "product_reference": "libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64"
        },
        "product_reference": "libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le"
        },
        "product_reference": "libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x"
        },
        "product_reference": "libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64"
        },
        "product_reference": "libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
        "relates_to_product_reference": "AppStream-10.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsoup3-doc-0:3.6.6-1.el10_3.9.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
          "product_id": "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        },
        "product_reference": "libsoup3-doc-0:3.6.6-1.el10_3.9.noarch",
        "relates_to_product_reference": "CRB-10.3.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Tristan Madani"
          ]
        }
      ],
      "cve": "CVE-2026-15709",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-14T09:34:32.593000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499922"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup\u0027s WebSocket implementation when using the permessage-deflate extension. The extension\u0027s decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability poses a high availability risk to both clients and servers utilizing libsoup for WebSocket communication. Because the memory exhaustion occurs during the extraction process before payload size validations are applied, standard post-decompression limits fail to mitigate the threat. A network-based attacker requires no privileges or user interaction to deliberately crash vulnerable applications or desktop services that establish connections using the default permessage-deflate configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499922",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499922"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15709"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/511",
          "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/511"
        }
      ],
      "release_date": "2026-07-14T09:42:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Sebasti\u00e1n Alba Vives (@Sebasteuo / 0xS4bb1)"
          ]
        }
      ],
      "cve": "CVE-2026-15711",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-07-14T09:46:13.021000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in libsoup\u0027s WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 \u00a75.5, which mandates that all WebSocket control frames (e.g., PING, PONG, CLOSE) contain a payload of 125 bytes or less. A remote, unauthenticated attacker can exploit this by sending a non-compliant, oversized control frame. Because the parser handles this protocol violation improperly instead of throwing an immediate connection termination error, it triggers a internal processing crash, resulting in a remote denial of service (DoS) for applications utilizing libsoup WebSockets.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw poses a moderate availability risk to both client and server applications depending on libsoup for WebSocket networking. By failing to drop connections that break core protocol design rules, the library allows low-complexity remote inputs to abruptly terminate the service state machine. Exploitation requires no authentication or user interaction, allowing any hostile peer on the wire to forcibly disconnect endpoints or crash application wrapper logic by intentionally packing data into a signaling frame.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15711"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15711",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15711"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15711",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15711"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/515",
          "url": "https://gitlab.gnome.org/GNOME/libsoup/-/issues/515"
        }
      ],
      "release_date": "2026-07-14T09:52:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Naresh Kandula (Nottiboy_1337)"
          ]
        }
      ],
      "cve": "CVE-2026-85197",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-09-04T07:12:40.870000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2528425"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap use-after-free in libsoup HTTP/2 client on_data_read() via GOAWAY during body upload",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects libsoup3. HTTP/2 client support was introduced in libsoup 3.x; the legacy libsoup 2.x library does not implement an HTTP/2 client and therefore does not contain the vulnerable code path.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-85197"
        },
        {
          "category": "external",
          "summary": "RHBZ#2528425",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528425"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-85197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-85197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85197"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libsoup/-/work_items/552",
          "url": "https://gitlab.gnome.org/GNOME/libsoup/-/work_items/552"
        }
      ],
      "release_date": "2026-09-03T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap use-after-free in libsoup HTTP/2 client on_data_read() via GOAWAY during body upload"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Hongduo Zhao"
          ]
        }
      ],
      "cve": "CVE-2026-102555",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543224"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important. An attacker who can supply a crafted data URI to an application that uses soup_uri_decode_data_uri() may cause a heap out-of-bounds read or denial of service. Impact depends on how the application consumes the returned GBytes. Red Hat Enterprise Linux ships libsoup/libsoup3 widely used by GNOME and other HTTP clients; applications that decode untrusted data URIs are in scope.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102555"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543224",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543224"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102555",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102555"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102555",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102555"
        }
      ],
      "release_date": "2026-09-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "To mitigate this do not pass untrusted data URIs to soup_uri_decode_data_uri().",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap buffer overflow via uninitialized length in data-URI base64 decoding"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Hongduo Zhao"
          ]
        }
      ],
      "cve": "CVE-2026-102556",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type"
      },
      "discovery_date": "2026-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543229"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important. A remote peer can send a WebSocket Pong that reaches receive_pong(). Exploitation requires an application to connect a ::pong handler that expects GBytes; many keep-alive users do. Successful triggering can crash the process or corrupt heap state. libsoup WebSocket support is used by client and server applications on Red Hat platforms.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543229",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543229"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102556"
        }
      ],
      "release_date": "2026-09-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "To mitigate avoid connecting custom handlers to SoupWebsocketConnection::pong, or avoid WebSocket use with untrusted peers.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Hongduo Zhao"
          ]
        }
      ],
      "cve": "CVE-2026-102557",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543231"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important. A remote, unauthenticated WebSocket peer can trigger heap corruption or denial of service during message reassembly. Any Red Hat product or application exposing or consuming libsoup WebSockets with untrusted peers is affected until updated.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102557"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543231",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543231"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102557",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102557"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102557",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102557"
        }
      ],
      "release_date": "2026-09-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "To mitigate this set a conservative max-total-incoming-message-size / incoming payload limits where the API allows, and do not accept WebSocket connections from untrusted peers.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Hongduo Zhao"
          ]
        }
      ],
      "cve": "CVE-2026-102558",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543274"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important. A remote WebSocket peer can cause heap corruption or denial of service, especially when applications leave incoming payload size unlimited. Default configurations that set a finite max-incoming-payload-size reduce exposure but the vulnerable code path remains relevant for applications that disable the limit.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102558"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543274",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543274"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102558",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102558"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102558",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102558"
        }
      ],
      "release_date": "2026-09-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "To mitigate this configure a finite max-incoming-payload-size (do not set it to 0/unlimited) on SoupWebsocketConnection. Restrict WebSocket exposure to trusted peers.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Hongduo Zhao"
          ]
        }
      ],
      "cve": "CVE-2026-102559",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543285"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important. Triggering requires causing a libsoup WebSocket client (or client-role connection) to send an extremely large message. That may be reachable when application-level message size is attacker-influenced. Impact is heap corruption or denial of service in the sending process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102559"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543285",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543285"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102559",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102559"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102559",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102559"
        }
      ],
      "release_date": "2026-09-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "To mitigate this enforce application-level limits on outgoing WebSocket message sizes. Do not send untrusted bulk data as a single WebSocket message.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Hongduo Zhao"
          ]
        }
      ],
      "cve": "CVE-2026-102560",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2543296"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Important. Exploitation requires the permessage-deflate extension to be negotiated and a very large outgoing message to be compressed. Applications that enable WebSocket deflate with untrusted or unbounded message sizes are affected. Impact is heap corruption or denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
          "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
          "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
          "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-102560"
        },
        {
          "category": "external",
          "summary": "RHBZ#2543296",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543296"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-102560",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-102560"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102560",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102560"
        }
      ],
      "release_date": "2026-09-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-11T12:47:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:98560"
        },
        {
          "category": "workaround",
          "details": "To mitigate this disable the permessage-deflate WebSocket extension if it is not required, and cap outgoing message sizes.",
          "product_ids": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.src",
            "AppStream-10.3.Z:libsoup3-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debuginfo-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-debugsource-0:3.6.6-1.el10_3.9.x86_64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.aarch64",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.ppc64le",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.s390x",
            "AppStream-10.3.Z:libsoup3-devel-0:3.6.6-1.el10_3.9.x86_64",
            "CRB-10.3.Z:libsoup3-doc-0:3.6.6-1.el10_3.9.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.