-
Wed Sep 30 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-20
- CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket
message reassembly
-
Wed Sep 30 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-19
- CVE-2026-102556 libsoup3: libsoup: Heap buffer overflow from WebSocket
Pong signal type confusion
-
Wed Sep 30 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-18
- CVE-2026-102558 libsoup3: libsoup: Heap buffer overflow during WebSocket
receive-buffer growth
-
Wed Sep 30 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-17
- CVE-2026-102555 libsoup3: libsoup: Heap buffer overflow via uninitialized
length in data-URI base64 decoding
-
Wed Sep 30 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-16
- CVE-2026-102560 libsoup3: libsoup: Heap buffer overflow during outgoing
permessage-deflate buffer growth
-
Wed Sep 30 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-15
- CVE-2026-102559 libsoup3: libsoup: Heap buffer overflow during WebSocket
client-frame masking
-
Tue Sep 08 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-14
- Fix CVE-2026-85197: http2 crash after connection destroyed
-
Tue Sep 08 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-13
- Fix CVE-2026-15711: Reject oversized WebSocket control frames
-
Tue Sep 08 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 3.6.5-12
- Fix CVE-2026-15709: bound decompressed WebSocket message size
-
Mon May 04 2026 Michael Catanzaro <mcatanzaro@gnome.org> - 3.6.5-11
- Add patches for CVE-2026-4271 and CVE-2026-5119