[CLSA-2026:1769598671] libsoup: Fix of CVE-2025-14523
Type:
security
Severity:
Important
Release date:
2026-01-28 11:11:15 UTC
Description:
- CVE-2025-14523: reject duplicate Host headers to prevent request smuggling, cache poisoning, and host-based access control bypass attacks
Updated packages:
  • libsoup-2.62.2-2.0.5.el7.tuxcare.els3.i686.rpm
    sha:b9d3cadfe0bfdebdf3d05d5a2aed7b41044278b63ca88b2dfa8e5ff46f1ffb74
  • libsoup-2.62.2-2.0.5.el7.tuxcare.els3.x86_64.rpm
    sha:a6090cc5f40d85adc10dca29b89b1ddbf661deb946f66352510ad33f815f833e
  • libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els3.i686.rpm
    sha:00724a8a5d8eb20f1dcb208f4b9f9e26b4815551da73b64231b688542b7c12c2
  • libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els3.x86_64.rpm
    sha:5b3557a5ad61d056fd1ddff5d37acb7ac98d6f37d5127beeb127e821e353c6aa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.