[CLSA-2026:1771519663] libsoup: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-02-20 09:46:21 UTC
Description:
- CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soup_filter_input_stream_read_until() - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum() with excessively long passwords
Updated packages:
  • libsoup-2.62.2-2.0.5.el7.tuxcare.els4.i686.rpm
    sha:a59451142daf5ccb02d41d210bc16620df7982d157ffab1cfa3a57e9d2d4187c
  • libsoup-2.62.2-2.0.5.el7.tuxcare.els4.x86_64.rpm
    sha:cfee555386c728825353fb0230120776ecb1ad9279dfa8e902826d68639c13a7
  • libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els4.i686.rpm
    sha:68006362ad5d056bc77e4fa4017f25c1dd15336d218677240de533b4714f2493
  • libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els4.x86_64.rpm
    sha:1797bc7cae626be1ff5f0d6f0964562bbac0879d6ec0e7e71d85212ec57ccef4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.