[El-errata] ELSA-2026-83384 Important: Oracle Linux 9 libsoup security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-83384

http://linux.oracle.com/errata/ELSA-2026-83384.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libsoup-2.72.0-16.el9_8.8.i686.rpm
libsoup-2.72.0-16.el9_8.8.x86_64.rpm
libsoup-devel-2.72.0-16.el9_8.8.i686.rpm
libsoup-devel-2.72.0-16.el9_8.8.x86_64.rpm

aarch64:
libsoup-2.72.0-16.el9_8.8.aarch64.rpm
libsoup-devel-2.72.0-16.el9_8.8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/libsoup-2.72.0-16.el9_8.8.src.rpm

Related CVEs:

CVE-2026-102556
CVE-2026-102557
CVE-2026-102558
CVE-2026-102559
CVE-2026-102560




Description of changes:

[2.72.0-16.8]
- CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket
  Pong signal type confusion

[2.72.0-16.7]
- CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket
  receive-buffer growth

[2.72.0-16.6]
- CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during WebSocket
  client-frame masking

[2.72.0-16.5]
- CVE-2026-102560 libsoup: libsoup: Heap buffer overflow during outgoing
  permessage-deflate buffer growth

[2.72.0-16.4]
- CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly
  message reassembly