Release date:
2026-10-23 16:40:13 UTC
Description:
- CVE-2026-102557, CVE-2026-102559: cap WebSocket message reassembly and
outgoing frames at the GByteArray size limit
- CVE-2026-102558: cap incoming WebSocket frame payloads at the receive
buffer limit
- CVE-2026-102556: emit the WebSocket pong signal with a GBytes
- CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest
Updated packages:
-
libsoup-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
sha:9765cce9f0e8a223d0dd946aa8b60e96c6f72c38f0ffe934adb026d4295f9f6e
-
libsoup-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
sha:f3ffb44e7b7ca363e96fdc44d59d4b7614c60fbdf0cce53b9e0d073bc463aec7
-
libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.i686.rpm
sha:bb07b1aeafa5594b921b264750a866ec31c34611dc9de13b91c4a3635240955c
-
libsoup-devel-2.62.2-2.0.13.el7.tuxcare.els2.x86_64.rpm
sha:e1eae2eaf06e3fd40263326e4ca35c2519c597bef5c64c469cf481defcff88f0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
