[El-errata] ELSA-2026-84586 Important: Oracle Linux 8 libsoup security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-84586

http://linux.oracle.com/errata/ELSA-2026-84586.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libsoup-2.62.3-19.el8_10.i686.rpm
libsoup-2.62.3-19.el8_10.x86_64.rpm
libsoup-devel-2.62.3-19.el8_10.i686.rpm
libsoup-devel-2.62.3-19.el8_10.x86_64.rpm

aarch64:
libsoup-2.62.3-19.el8_10.aarch64.rpm
libsoup-devel-2.62.3-19.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libsoup-2.62.3-19.el8_10.src.rpm

Related CVEs:

CVE-2026-102556
CVE-2026-102557
CVE-2026-102558
CVE-2026-102559




Description of changes:

[2.62.3-19]
- CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket
  message reassembly

[2.62.3-18]
- CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket
  receive-buffer growth

[2.62.3-17]
- CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong
  signal type confusion

[2.62.3-16]
- CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
  client-frame masking