The libsoup library for GNOME contains two stack-based buffer overflow vulnerabilities: one caused by a signed to unsigned conversion error in NTLM authentication (CVE-2026-0719) and another in multipart HTTP response parsing (CVE-2026-1761). These vulnerabilities could lead to memory corruption. Red Hat has released updated libsoup packages for Red Hat Enterprise Linux 8 and its extended life cycle variants across multiple architectures (x86_64, s390x, ppc64le, aarch64) to address these issues. The advisory RHSA-2026:2215 provides details and instructions for applying the update. No CVSS scores are provided in the advisory, but the impact is rated as important by Red Hat Product Security.

Successful exploitation of these vulnerabilities could result in stack-based buffer overflows, potentially leading to memory corruption and impacting the security of applications using libsoup for HTTP client or server functionality. The specific impact details and exploitability are not provided, and no known exploits in the wild have been reported. The issues affect Red Hat Enterprise Linux 8 and its extended life cycle versions on multiple hardware architectures.

Red Hat has released updated libsoup packages that fix these vulnerabilities. Users of Red Hat Enterprise Linux 8 and its extended life cycle versions should apply the security update as described in Red Hat advisory RHSA-2026:2215 and the referenced article https://access.redhat.com/articles/11258. Applying these official patches is the recommended remediation. No additional mitigation steps are indicated by the vendor advisory.