Red Hat Product Errata RHSA-2026:68234 - Security Advisory
Issued:
2026-09-16
Updated:
2026-09-16

RHSA-2026:68234 - Security Advisory

Synopsis

Moderate: libsoup security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libsoup is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

  • SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709)
  • libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2499922 - CVE-2026-15709 SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service
  • BZ - 2499924 - CVE-2026-15711 libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation

Red Hat Enterprise Linux for x86_64 9

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
x86_64
libsoup-2.72.0-16.el9_8.3.i686.rpm SHA-256: 90007e8d71f08e92f1a991a02ef6736dbf9c269b5d12086b87b1e4cc8006ea0f
libsoup-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 73ba6651bd7cd7f27251608b64e5f72fdc22088b47950b116f9a2c4ad6a0978d
libsoup-debuginfo-2.72.0-16.el9_8.3.i686.rpm SHA-256: 20f4775a283c5e1e5e7142dc140f070f1be98c370c7a12343f0a4ffb5723e971
libsoup-debuginfo-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 02915a647a8214d7e3cf87f4d2ece67a05e3ac3b734251f26fa1fda687b58a6d
libsoup-debugsource-2.72.0-16.el9_8.3.i686.rpm SHA-256: 7b897d4a4064f5897f3fc68adcf132a092ea208da98b8f01905dfc13bed73152
libsoup-debugsource-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 87c23cc8404db67cd1ae28b93eb1b2775710c4873d7d23a78f6989d28363c133
libsoup-devel-2.72.0-16.el9_8.3.i686.rpm SHA-256: f5ae72fefce5b3201eac978364081b17e82130cd7a5d658e5fcc7b4a1dc7ef6a
libsoup-devel-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: a7e8c38ed46027a1c49ef5cc84b531528f7653dc30762cc971d9b06212ced58f

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
x86_64
libsoup-2.72.0-16.el9_8.3.i686.rpm SHA-256: 90007e8d71f08e92f1a991a02ef6736dbf9c269b5d12086b87b1e4cc8006ea0f
libsoup-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 73ba6651bd7cd7f27251608b64e5f72fdc22088b47950b116f9a2c4ad6a0978d
libsoup-debuginfo-2.72.0-16.el9_8.3.i686.rpm SHA-256: 20f4775a283c5e1e5e7142dc140f070f1be98c370c7a12343f0a4ffb5723e971
libsoup-debuginfo-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 02915a647a8214d7e3cf87f4d2ece67a05e3ac3b734251f26fa1fda687b58a6d
libsoup-debugsource-2.72.0-16.el9_8.3.i686.rpm SHA-256: 7b897d4a4064f5897f3fc68adcf132a092ea208da98b8f01905dfc13bed73152
libsoup-debugsource-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 87c23cc8404db67cd1ae28b93eb1b2775710c4873d7d23a78f6989d28363c133
libsoup-devel-2.72.0-16.el9_8.3.i686.rpm SHA-256: f5ae72fefce5b3201eac978364081b17e82130cd7a5d658e5fcc7b4a1dc7ef6a
libsoup-devel-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: a7e8c38ed46027a1c49ef5cc84b531528f7653dc30762cc971d9b06212ced58f

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
s390x
libsoup-2.72.0-16.el9_8.3.s390x.rpm SHA-256: bcfef25b6dde7f4207f038ef668c1a2cf7160a84d472d642a325bd44ed69d2c3
libsoup-debuginfo-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 72feb2fa5cc08ceefbed4f2ba549edaed3cacc67b2f84bc81026840b55abc6e4
libsoup-debugsource-2.72.0-16.el9_8.3.s390x.rpm SHA-256: c52e552540af8b187d3813ae61d3b718dc1252f442bfd6fbdde5dc1d30668ce7
libsoup-devel-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 8531ef8be0aaebfe66cdacb61f9364f06668e248bc168a6d04f3dda8cd410e5d

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
s390x
libsoup-2.72.0-16.el9_8.3.s390x.rpm SHA-256: bcfef25b6dde7f4207f038ef668c1a2cf7160a84d472d642a325bd44ed69d2c3
libsoup-debuginfo-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 72feb2fa5cc08ceefbed4f2ba549edaed3cacc67b2f84bc81026840b55abc6e4
libsoup-debugsource-2.72.0-16.el9_8.3.s390x.rpm SHA-256: c52e552540af8b187d3813ae61d3b718dc1252f442bfd6fbdde5dc1d30668ce7
libsoup-devel-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 8531ef8be0aaebfe66cdacb61f9364f06668e248bc168a6d04f3dda8cd410e5d

Red Hat Enterprise Linux for Power, little endian 9

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
ppc64le
libsoup-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: d48d63e80021a57221ee252975179a2fcff4c6c7aee6b7bf6669412db55537bd
libsoup-debuginfo-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: dd08e68b1c88f1961b3a5d9301cd8e127a73e3e808beb7954ec5a17fadb583bb
libsoup-debugsource-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 1ff87b7d2c3a05319480d8f8ce3907b861539c0a8a67b7ecd59e23185ea1b785
libsoup-devel-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 14de8e97f0e857eb3b2a6c65d967805e91bc8b602ec9b965250313952f09d6c4

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
ppc64le
libsoup-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: d48d63e80021a57221ee252975179a2fcff4c6c7aee6b7bf6669412db55537bd
libsoup-debuginfo-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: dd08e68b1c88f1961b3a5d9301cd8e127a73e3e808beb7954ec5a17fadb583bb
libsoup-debugsource-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 1ff87b7d2c3a05319480d8f8ce3907b861539c0a8a67b7ecd59e23185ea1b785
libsoup-devel-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 14de8e97f0e857eb3b2a6c65d967805e91bc8b602ec9b965250313952f09d6c4

Red Hat Enterprise Linux for ARM 64 9

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
aarch64
libsoup-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 97a49f548dafb10d0be5e0c38fa7edfb1d147a815bd43ebfa2bf77b9cb75b8c0
libsoup-debuginfo-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 8d5665f308b926199a39a51ea3ca916d4aefc1c2d32b1b41afda4509111b19c7
libsoup-debugsource-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: d0efd9999dc88c3e5b84c060f926648c03f99c9273299a889cc94ca625b86724
libsoup-devel-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: afa0f7e8463f04a6de1d466a611ebb41705d2d95034ae20db6258f2edb53eb31

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
aarch64
libsoup-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 97a49f548dafb10d0be5e0c38fa7edfb1d147a815bd43ebfa2bf77b9cb75b8c0
libsoup-debuginfo-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 8d5665f308b926199a39a51ea3ca916d4aefc1c2d32b1b41afda4509111b19c7
libsoup-debugsource-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: d0efd9999dc88c3e5b84c060f926648c03f99c9273299a889cc94ca625b86724
libsoup-devel-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: afa0f7e8463f04a6de1d466a611ebb41705d2d95034ae20db6258f2edb53eb31

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
ppc64le
libsoup-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: d48d63e80021a57221ee252975179a2fcff4c6c7aee6b7bf6669412db55537bd
libsoup-debuginfo-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: dd08e68b1c88f1961b3a5d9301cd8e127a73e3e808beb7954ec5a17fadb583bb
libsoup-debugsource-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 1ff87b7d2c3a05319480d8f8ce3907b861539c0a8a67b7ecd59e23185ea1b785
libsoup-devel-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 14de8e97f0e857eb3b2a6c65d967805e91bc8b602ec9b965250313952f09d6c4

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
x86_64
libsoup-2.72.0-16.el9_8.3.i686.rpm SHA-256: 90007e8d71f08e92f1a991a02ef6736dbf9c269b5d12086b87b1e4cc8006ea0f
libsoup-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 73ba6651bd7cd7f27251608b64e5f72fdc22088b47950b116f9a2c4ad6a0978d
libsoup-debuginfo-2.72.0-16.el9_8.3.i686.rpm SHA-256: 20f4775a283c5e1e5e7142dc140f070f1be98c370c7a12343f0a4ffb5723e971
libsoup-debuginfo-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 02915a647a8214d7e3cf87f4d2ece67a05e3ac3b734251f26fa1fda687b58a6d
libsoup-debugsource-2.72.0-16.el9_8.3.i686.rpm SHA-256: 7b897d4a4064f5897f3fc68adcf132a092ea208da98b8f01905dfc13bed73152
libsoup-debugsource-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 87c23cc8404db67cd1ae28b93eb1b2775710c4873d7d23a78f6989d28363c133
libsoup-devel-2.72.0-16.el9_8.3.i686.rpm SHA-256: f5ae72fefce5b3201eac978364081b17e82130cd7a5d658e5fcc7b4a1dc7ef6a
libsoup-devel-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: a7e8c38ed46027a1c49ef5cc84b531528f7653dc30762cc971d9b06212ced58f

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
aarch64
libsoup-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 97a49f548dafb10d0be5e0c38fa7edfb1d147a815bd43ebfa2bf77b9cb75b8c0
libsoup-debuginfo-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 8d5665f308b926199a39a51ea3ca916d4aefc1c2d32b1b41afda4509111b19c7
libsoup-debugsource-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: d0efd9999dc88c3e5b84c060f926648c03f99c9273299a889cc94ca625b86724
libsoup-devel-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: afa0f7e8463f04a6de1d466a611ebb41705d2d95034ae20db6258f2edb53eb31

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
s390x
libsoup-2.72.0-16.el9_8.3.s390x.rpm SHA-256: bcfef25b6dde7f4207f038ef668c1a2cf7160a84d472d642a325bd44ed69d2c3
libsoup-debuginfo-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 72feb2fa5cc08ceefbed4f2ba549edaed3cacc67b2f84bc81026840b55abc6e4
libsoup-debugsource-2.72.0-16.el9_8.3.s390x.rpm SHA-256: c52e552540af8b187d3813ae61d3b718dc1252f442bfd6fbdde5dc1d30668ce7
libsoup-devel-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 8531ef8be0aaebfe66cdacb61f9364f06668e248bc168a6d04f3dda8cd410e5d

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
x86_64
libsoup-2.72.0-16.el9_8.3.i686.rpm SHA-256: 90007e8d71f08e92f1a991a02ef6736dbf9c269b5d12086b87b1e4cc8006ea0f
libsoup-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 73ba6651bd7cd7f27251608b64e5f72fdc22088b47950b116f9a2c4ad6a0978d
libsoup-debuginfo-2.72.0-16.el9_8.3.i686.rpm SHA-256: 20f4775a283c5e1e5e7142dc140f070f1be98c370c7a12343f0a4ffb5723e971
libsoup-debuginfo-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 02915a647a8214d7e3cf87f4d2ece67a05e3ac3b734251f26fa1fda687b58a6d
libsoup-debugsource-2.72.0-16.el9_8.3.i686.rpm SHA-256: 7b897d4a4064f5897f3fc68adcf132a092ea208da98b8f01905dfc13bed73152
libsoup-debugsource-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: 87c23cc8404db67cd1ae28b93eb1b2775710c4873d7d23a78f6989d28363c133
libsoup-devel-2.72.0-16.el9_8.3.i686.rpm SHA-256: f5ae72fefce5b3201eac978364081b17e82130cd7a5d658e5fcc7b4a1dc7ef6a
libsoup-devel-2.72.0-16.el9_8.3.x86_64.rpm SHA-256: a7e8c38ed46027a1c49ef5cc84b531528f7653dc30762cc971d9b06212ced58f

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
aarch64
libsoup-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 97a49f548dafb10d0be5e0c38fa7edfb1d147a815bd43ebfa2bf77b9cb75b8c0
libsoup-debuginfo-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: 8d5665f308b926199a39a51ea3ca916d4aefc1c2d32b1b41afda4509111b19c7
libsoup-debugsource-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: d0efd9999dc88c3e5b84c060f926648c03f99c9273299a889cc94ca625b86724
libsoup-devel-2.72.0-16.el9_8.3.aarch64.rpm SHA-256: afa0f7e8463f04a6de1d466a611ebb41705d2d95034ae20db6258f2edb53eb31

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
ppc64le
libsoup-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: d48d63e80021a57221ee252975179a2fcff4c6c7aee6b7bf6669412db55537bd
libsoup-debuginfo-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: dd08e68b1c88f1961b3a5d9301cd8e127a73e3e808beb7954ec5a17fadb583bb
libsoup-debugsource-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 1ff87b7d2c3a05319480d8f8ce3907b861539c0a8a67b7ecd59e23185ea1b785
libsoup-devel-2.72.0-16.el9_8.3.ppc64le.rpm SHA-256: 14de8e97f0e857eb3b2a6c65d967805e91bc8b602ec9b965250313952f09d6c4

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
libsoup-2.72.0-16.el9_8.3.src.rpm SHA-256: 7c15406b2b9bf03f9565cfb3be8e43968ebbb9c790a41aeb349ccafb1285985a
s390x
libsoup-2.72.0-16.el9_8.3.s390x.rpm SHA-256: bcfef25b6dde7f4207f038ef668c1a2cf7160a84d472d642a325bd44ed69d2c3
libsoup-debuginfo-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 72feb2fa5cc08ceefbed4f2ba549edaed3cacc67b2f84bc81026840b55abc6e4
libsoup-debugsource-2.72.0-16.el9_8.3.s390x.rpm SHA-256: c52e552540af8b187d3813ae61d3b718dc1252f442bfd6fbdde5dc1d30668ce7
libsoup-devel-2.72.0-16.el9_8.3.s390x.rpm SHA-256: 8531ef8be0aaebfe66cdacb61f9364f06668e248bc168a6d04f3dda8cd410e5d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.