Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 8.6
  CVE-2026-102556

  Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

  A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the do…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 29, 2026
• High 8.6
  CVE-2026-102557

  Libsoup: libsoup: heap buffer overflow during websocket message reassembly

  A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 29, 2026
• High 8.6
  CVE-2026-102558

  Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

  A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 29, 2026
• High 8.6
  CVE-2026-102559

  Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

  A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer o…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 29, 2026
• High 8.6
  CVE-2026-102560

  Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

  A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap b…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Sep 29, 2026

Revision history

1. 2026-11-12 #14

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2026-11-11 #13

   Neue Updates von Red Hat aufgenommen

3. 2026-11-04 #12

   Neue Updates von SUSE aufgenommen

4. 2026-11-03 #11

   Neue Updates von Ubuntu und SUSE aufgenommen

5. 2026-11-02 #10

   Neue Updates von Red Hat aufgenommen

6. 2026-11-01 #9

   Neue Updates von Red Hat und openSUSE aufgenommen

7. 2026-10-28 #8

   Neue Updates von Red Hat aufgenommen

8. 2026-10-26 #7

   Neue Updates von SUSE und Fedora aufgenommen

9. 2026-10-21 #6

   Neue Updates von openSUSE aufgenommen

10. 2026-10-20 #5

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

11. 2026-10-19 #4

    Neue Updates von SUSE und Oracle Linux aufgenommen

12. 2026-10-18 #3

    Neue Updates von Red Hat, SUSE und Rocky Enterprise Software Foundation aufgenommen

13. 2026-10-15 #2

    Neue Updates von Red Hat und Oracle Linux aufgenommen

14. 2026-10-14 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:83384 vom 2026-10-14
  https://access.redhat.com/errata/RHSA-2026:83384
• Red Hat Security Advisory RHSA-2026:83618 vom 2026-10-15
  https://access.redhat.com/errata/RHSA-2026:83618
• Oracle Linux Security Advisory ELSA-2026-83384 vom 2026-10-15
  https://linux.oracle.com/errata/ELSA-2026-83384.html
• Oracle Linux Security Advisory ELSA-2026-83618 vom 2026-10-16
  https://linux.oracle.com/errata/ELSA-2026-83618.html
• Red Hat Security Advisory RHSA-2026:84586 vom 2026-10-19
  https://access.redhat.com/errata/RHSA-2026:84586
• SUSE Security Update SUSE-SU-2026:4703-1 vom 2026-10-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029883.html
• Rocky Linux Security Advisory RLSA-2026:83384 vom 2026-10-16
  https://errata.build.resf.org/RLSA-2026:83384
• SUSE Security Update SUSE-SU-2026:4690-1 vom 2026-10-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029876.html
• SUSE Security Update SUSE-SU-2026:4739-1 vom 2026-10-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029903.html
• Oracle Linux Security Advisory ELSA-2026-84586 vom 2026-10-19
  http://linux.oracle.com/errata/ELSA-2026-84586.html
• Rocky Linux Security Advisory RLSA-2026:84586 vom 2026-10-20
  https://errata.build.resf.org/RLSA-2026:84586
• openSUSE Security Update OPENSUSE-SU-2026:12084-1 vom 2026-10-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U65YW43DMOOV5GF3RTEYWLX6PLLKDGOB/
• SUSE Security Update SUSE-SU-2026:24368-1 vom 2026-10-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/030163.html
• Fedora Security Advisory FEDORA-2026-F06A7887AF vom 2026-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f06a7887af
• Fedora Security Advisory FEDORA-2026-6C3A4775A6 vom 2026-10-27
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-6c3a4775a6
• Red Hat Security Advisory RHSA-2026:92347 vom 2026-10-29
  https://access.redhat.com/errata/RHSA-2026:92347
• Red Hat Security Advisory RHSA-2026:93466 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93466
• Red Hat Security Advisory RHSA-2026:93446 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93446
• Red Hat Security Advisory RHSA-2026:93445 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93445
• Red Hat Security Advisory RHSA-2026:93465 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93465
• openSUSE Security Update OPENSUSE-SU-2026:22181-1 vom 2026-10-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FDI5FR6KJOSYGO77EVEG2LFYBED6CX7H/
• Red Hat Security Advisory RHSA-2026:93583 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93583
• Red Hat Security Advisory RHSA-2026:93447 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93447
• Red Hat Security Advisory RHSA-2026:93716 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93716
• Ubuntu Security Notice USN-8975-1 vom 2026-11-03
  https://ubuntu.com/security/notices/USN-8975-1
• SUSE Security Update SUSE-SU-2026:24470-1 vom 2026-11-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030309.html
• SUSE Security Update SUSE-SU-2026:24515-1 vom 2026-11-04
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030416.html
• Red Hat Security Advisory RHSA-2026:98453 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98453
• Red Hat Security Advisory RHSA-2026:98560 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98560
• Rocky Linux Security Advisory RLSA-2026:98560 vom 2026-11-13
  https://errata.build.resf.org/RLSA-2026:98560