[CLSA-2026:1788859279] libsoup: Fix of CVE-2026-12548
Type:
security
Severity:
Moderate
Release date:
2026-09-08 09:21:28 UTC
Description:
- CVE-2026-12548: cap the header block passed to soup_headers_parse() at 256K, preventing an int truncation of the length parameter and the resulting heap over-read when parsing multipart messages
CVEs fixed:
Updated packages:
  • libsoup-2.72.0-10.el9_6.3.tuxcare.els10.i686.rpm
    sha:b412d92e2958cc38f6f4bf85a6aec20030cdafdebcac708dd9f8d0ccf4ffef4e
  • libsoup-2.72.0-10.el9_6.3.tuxcare.els10.x86_64.rpm
    sha:c8481f6c132f16fbf7f290fc618b3e20e8c05dd6d30c10d293c6a54d86d64809
  • libsoup-devel-2.72.0-10.el9_6.3.tuxcare.els10.i686.rpm
    sha:4dba843a5e8375e76cfa2e969e16fde879804162140e6ae9abfe9798af6fecdf
  • libsoup-devel-2.72.0-10.el9_6.3.tuxcare.els10.x86_64.rpm
    sha:0702a787ef06d03e6828c5a5b20ec83326b194a625bf0240cbee684a96c20bd1
  • libsoup-doc-2.72.0-10.el9_6.3.tuxcare.els10.noarch.rpm
    sha:0875d14c22eb5ea7e91aaa513cb1e853b879ed5e92a0e92bbe470524228d7e16
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.