Critical Security Update for libsoup3: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:83618: Red Hat Security Advisory: libsoup3 security update. Affects libsoup3 versions < 0:3.6.5-3.el10_2.20. Fixed in 0:3.6.5-3.el10_2.20. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libsoup3 is a powerful HTTP client/server library designed for use in GNOME applications. It provides a simple API for making HTTP requests and handling responses, making it essential for applications that require network communication. However, recent vulnerabilities have been identified that could compromise the security of applications relying on this library.
Vulnerability Detail
The vulnerabilities identified in libsoup3, tracked under CVE-2026-102555 to CVE-2026-102560, stem from improper handling of HTTP requests and responses. These issues could allow attackers to exploit the library, potentially leading to unauthorized access, data leakage, or denial of service. The vulnerabilities have been assigned a CVSS score of 8.6, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:3.6.5-3.el10_2.20
This is the first release that contains the fix.
sudo dnf update libsoup3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the exposure of their applications by restricting network access or disabling features that utilize libsoup3 until the update is applied. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The identified vulnerabilities in libsoup3 pose significant risks to applications that utilize this library. It is crucial for users to update to the latest patched version to mitigate these risks effectively. Utilizing tools like Vulert can help monitor and manage vulnerabilities in open-source software.
See every vulnerability recorded for libsoup3 →
FAQ
libsoup3 is an HTTP client/server library used in GNOME applications for network communication.
The vulnerabilities could lead to unauthorized access, data leakage, or denial of service, posing significant risks to applications using this library.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
The vulnerabilities have a CVSS score of 8.6, indicating a high severity level.
If immediate updating is not possible, consider restricting network access or disabling features that rely on libsoup3 until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for libsoup3.
