[CLSA-2025:1753131065] libsoup: Fix of 7 CVEs
Type:
security
Severity:
Moderate
Release date:
2025-07-21 20:51:09 UTC
Description:
- CVE-2025-32050: fix overflow in append_param_quoted() - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff() - CVE-2025-32053: fix heap buffer overflow in sniff_feed_or_html() - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in soup_header_parse_quality_list() - CVE-2025-46421: strip authentication credentails on cross-origin redirect - CVE-2025-2784: fix heap buffer over-read when sniffing content via the skip_insight_whitespace() function
Updated packages:
  • libsoup-2.62.2-2.0.1.el7.tuxcare.els5.i686.rpm
    sha:77b504701139e34061d0cfd9383d6921ef51f49320d1b3d5729e44ef81b0b7e9
  • libsoup-2.62.2-2.0.1.el7.tuxcare.els5.x86_64.rpm
    sha:27512ab8563eac07e856f997c07025e9481bd47b551ae6320173a6bf7842e26b
  • libsoup-devel-2.62.2-2.0.1.el7.tuxcare.els5.i686.rpm
    sha:4f0c4e830eddbcdac5578940bfa64cb5b00c6bd353ed55d36037b7ce70528f5b
  • libsoup-devel-2.62.2-2.0.1.el7.tuxcare.els5.x86_64.rpm
    sha:25ca687df8581c2d3828d055d4790203e0dd0972ba09f0337121ff782e8aecb1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.