Summary
[2.62.3-11]
- Backport patch for CVE-2025-14523
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libsoup | 0:2.62.3-11.el8_10 |
| Oracle Linux · 8 | libsoup-devel | 0:2.62.3-11.el8_10 |
Vulnerabilities 1
-
High 8.2
Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)
A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy r…