Packages
- libsoup2.4 - HTTP client/server library for GNOME
- libsoup3 - HTTP client/server library for GNOME
Details
It was discovered that libsoup incorrectly handled certain WebSocket
frames. A remote attacker could possibly use this issue to cause an
application to crash or expose sensitive information. This issue only
affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu
26.10. (CVE-2026-12478)
It was discovered that libsoup incorrectly handled certain data URIs. A
remote attacker could possibly use this issue to cause an application to
crash or expose sensitive information. This issue only affected Ubuntu
22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10.
(CVE-2026-102555)
It was discovered that libsoup incorrectly handled certain WebSocket
messages. A remote attacker could possibly use this issue to cause an
application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu
20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...
It was discovered that libsoup incorrectly handled certain WebSocket
frames. A remote attacker could possibly use this issue to cause an
application to crash or expose sensitive information. This issue only
affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu
26.10. (CVE-2026-12478)
It was discovered that libsoup incorrectly handled certain data URIs. A
remote attacker could possibly use this issue to cause an application to
crash or expose sensitive information. This issue only affected Ubuntu
22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10.
(CVE-2026-102555)
It was discovered that libsoup incorrectly handled certain WebSocket
messages. A remote attacker could possibly use this issue to cause an
application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu
20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and
Ubuntu 26.10. (CVE-2026-102556)
It was discovered that libsoup incorrectly handled fragmented WebSocket
messages. A remote attacker could possibly use this issue to cause an
application to crash. (CVE-2026-102557)
It was discovered that libsoup incorrectly handled certain WebSocket
frames. A remote attacker could possibly use this issue to cause an
application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu
20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and
Ubuntu 26.10. (CVE-2026-102558)
It was discovered that libsoup incorrectly handled large WebSocket
messages. An attacker could possibly use this issue to cause an
application to crash. (CVE-2026-102559)
It was discovered that libsoup incorrectly handled compressed WebSocket
messages. An attacker could possibly use this issue to cause an
application to crash. This issue only affected Ubuntu 20.04 LTS, Ubuntu
22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10.
(CVE-2026-102560)
It was discovered that libsoup did not properly handle certain HTTP
requests. A remote attacker could possibly use this issue to inject
arbitrary HTTP requests. (CVE-2026-103399)
It was discovered that libsoup incorrectly handled proxy credentials. A
remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2026-12547)
It was discovered that libsoup incorrectly handled multipart messages. A
remote attacker could possibly use this issue to cause an application to
crash or obtain sensitive information. (CVE-2026-12548)
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.