Release libsoup-2.72.0-16.el9_8.8 ALSA-2026:83384
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 12/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Active
- Domain
- networking, security
Research direction
This is a tracking issue for an AlmaLinux security erratum, not a code change, and the payload names no files, tests or entry points. Start from the CVE references and the affected libsoup package list to understand the five WebSocket heap-overflow fixes. The discussion is active with 17 comments and no linked pull request, so check the thread for the agreed next step before doing anything. Done means the maintainers have confirmed the update is published.
Written by the indexing model from the issue text.
Description
libsoup security update
Severity: Important
Description
The libsoup packages provide an HTTP client and server library for GNOME.
Security Fix(es):
- libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556)
- libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557)
- libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558)
- libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559)
- libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
libsoup-2.72.0-16.el9_8.8.i686
libsoup-2.72.0-16.el9_8.8.x86_64
libsoup-devel-2.72.0-16.el9_8.8.i686
libsoup-devel-2.72.0-16.el9_8.8.x86_64
libsoup-2.72.0-16.el9_8.8.s390x
libsoup-devel-2.72.0-16.el9_8.8.s390x
libsoup-2.72.0-16.el9_8.8.ppc64le
libsoup-devel-2.72.0-16.el9_8.8.ppc64le
libsoup-2.72.0-16.el9_8.8.aarch64
libsoup-devel-2.72.0-16.el9_8.8.aarch64
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
All issues in AlmaLinux/updates
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
blinklabs-io/dingo#5368 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
bug follow-up lane:backlog
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Sanne/incus-spawn#1576 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
-
bug triage/needs-triage
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
praxis-proxy/grid#412 ·
Maintainers usually reply within 1 day