OESA-2026-3779

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3779

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-3779.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-3779

Upstream

CVE-2026-15711

Published

2026-09-14T16:34:16Z

Modified

2026-09-13T16:45:39Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

libsoup security update

Details

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames (e.g., PING, PONG, CLOSE) contain a payload of 125 bytes or less. A remote, unauthenticated attacker can exploit this by sending a non-compliant, oversized control frame. Because the parser handles this protocol violation improperly instead of throwing an immediate connection termination error, it triggers a internal processing crash, resulting in a remote denial of service (DoS) for applications utilizing libsoup WebSockets.(CVE-2026-15711)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP4 / libsoup

Package

Name: libsoup
Purl: pkg:rpm/openEuler/libsoup&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.71.0-22.oe2003sp4

Ecosystem specific

{
    "aarch64": [
        "libsoup-2.71.0-22.oe2003sp4.aarch64.rpm",
        "libsoup-debuginfo-2.71.0-22.oe2003sp4.aarch64.rpm",
        "libsoup-debugsource-2.71.0-22.oe2003sp4.aarch64.rpm",
        "libsoup-devel-2.71.0-22.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "libsoup-help-2.71.0-22.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "libsoup-2.71.0-22.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "libsoup-2.71.0-22.oe2003sp4.x86_64.rpm",
        "libsoup-debuginfo-2.71.0-22.oe2003sp4.x86_64.rpm",
        "libsoup-debugsource-2.71.0-22.oe2003sp4.x86_64.rpm",
        "libsoup-devel-2.71.0-22.oe2003sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-3779.json"