[CLSA-2026:1769687040] libsoup: Fix of CVE-2025-14523
Type:
security
Severity:
Important
Release date:
2026-02-03 11:45:32 UTC
Description:
- CVE-2025-14523: reject duplicate Host headers to prevent request smuggling, cache poisoning, and host-based access control bypass attacks
Updated packages:
  • libsoup-2.62.2-2.0.5.el7.tuxcare.els3.i686.rpm
    sha:9ce6616944336f577559a807dc878a520545fc0027108b868649d3656f0649ad
  • libsoup-2.62.2-2.0.5.el7.tuxcare.els3.x86_64.rpm
    sha:62372f566dcfe3a9153ab154961e711f6071a7b0a3b7a4d20c19fd498ac22394
  • libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els3.i686.rpm
    sha:0421985b48415068299c417da8c5793743ce18c9d9bdd7033418f2a6c3c78587
  • libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els3.x86_64.rpm
    sha:bc6d8b7da17a5376a81b497fdbc51b9cbea2a0080948ff9d4c40008c2617200a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.