High ELSA-2026-2410 1 CVE

Important: libsoup3 security update (Oracle Linux 10)

Published Feb 10, 2026 · Updated Feb 10, 2026

Ecosystem: Oracle Linux

Summary

[3.6.5-10]
- Add patch for CVE-2026-1761

[3.6.5-9]
- Fix CVE-2026-0719

[3.6.5-8]
- Fix CVE-2025-14523

[3.6.5-7]
- Add patch for CVE-2025-12105

[3.6.5-6]
- Fix integer overflow in date/time parsing

[3.6.5-5]
- Bump revision number

[3.6.5-4]
- Fix several CVEs

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 10	libsoup3	0:3.6.5-3.el10_1.10
Oracle Linux · 10	libsoup3-devel	0:3.6.5-3.el10_1.10
Oracle Linux · 10	libsoup3-doc	0:3.6.5-3.el10_1.10

Vulnerabilities 1

High 8.6

CVE-2026-1761

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux

Feb 2, 2026