ELSA-2026-68235

ELSA-2026-68235 - libsoup3 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-17

Description

[3.6.5-14]
- Fix CVE-2026-85197: http2 crash after connection destroyed

[3.6.5-13]
- Fix CVE-2026-15711: Reject oversized WebSocket control frames

[3.6.5-12]
- Fix CVE-2026-15709: bound decompressed WebSocket message size

[3.6.5-11]
- Add patches for CVE-2026-4271 and CVE-2026-5119

[3.6.5-10]
- Add patch for CVE-2026-1761

[3.6.5-9]
- Fix CVE-2026-0719

[3.6.5-8]
- Fix CVE-2025-14523

[3.6.5-7]
- Add patch for CVE-2025-12105

[3.6.5-6]
- Fix integer overflow in date/time parsing

[3.6.5-5]
- Bump revision number

Related CVEs

CVE-2026-15709

CVE-2026-15711

CVE-2026-85197

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	libsoup3-3.6.5-3.el10_2.14.src.rpm	6fa681e04fa8c4e5e417d4b71b8a10879a3a1128db533648d7f30041426b9a5e	-	ol10_aarch64_appstream
	libsoup3-3.6.5-3.el10_2.14.src.rpm	6fa681e04fa8c4e5e417d4b71b8a10879a3a1128db533648d7f30041426b9a5e	-	ol10_aarch64_codeready_builder
	libsoup3-3.6.5-3.el10_2.14.aarch64.rpm	0f57e47276a0a3197456cd23207322d7e672d2b4828b3cdc1c34d06851e4a467	-	ol10_aarch64_appstream
	libsoup3-devel-3.6.5-3.el10_2.14.aarch64.rpm	960cddef5efad3bb274be74f83df57eb8a0fefd78541f2e67fcce4e64f912c98	-	ol10_aarch64_appstream
	libsoup3-doc-3.6.5-3.el10_2.14.noarch.rpm	607823c59b4a122ae41c0933200a41342d9c83f8e6616fb107816e86e4b2a03c	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	libsoup3-3.6.5-3.el10_2.14.src.rpm	6fa681e04fa8c4e5e417d4b71b8a10879a3a1128db533648d7f30041426b9a5e	-	ol10_x86_64_appstream
	libsoup3-3.6.5-3.el10_2.14.src.rpm	6fa681e04fa8c4e5e417d4b71b8a10879a3a1128db533648d7f30041426b9a5e	-	ol10_x86_64_codeready_builder
	libsoup3-3.6.5-3.el10_2.14.x86_64.rpm	1bc7982de3434d3aae41cbb6f163ab5b7d3144ec7c02b07cc3af0fb85083f272	-	ol10_x86_64_appstream
	libsoup3-devel-3.6.5-3.el10_2.14.x86_64.rpm	b968a1d665d4b2275ee090bbaed97712658b4869490612e6168005d27cd8d4dd	-	ol10_x86_64_appstream
	libsoup3-doc-3.6.5-3.el10_2.14.noarch.rpm	607823c59b4a122ae41c0933200a41342d9c83f8e6616fb107816e86e4b2a03c	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team