CVE-2026-102559

Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen

Red Hat Enterprise Linux, Fedora Linux, RESF Rocky Linux, SUSE Linux, SUSE openSUSE, Ubuntu Linux, Oracle Linux

A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow.

29. Sep 2026

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/errata/RHSA-2026:83384
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:83618
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:84586
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:92347
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93445
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93446
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93447
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93465
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93466
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93583
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:93716
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:98453
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:98560
• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-102559
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2543285
• CERT-Bund
  WID-SEC-2026-3952
• NVD
  CVE-2026-102559