Summary
[3.6.5-8]
- Fix CVE-2025-14523
[3.6.5-7]
- Add patch for CVE-2025-12105
[3.6.5-6]
- Fix integer overflow in date/time parsing
[3.6.5-5]
- Bump revision number
[3.6.5-4]
- Fix several CVEs
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libsoup3 | 0:3.6.5-3.el10_1.8 |
| Oracle Linux · 10 | libsoup3-devel | 0:3.6.5-3.el10_1.8 |
| Oracle Linux · 10 | libsoup3-doc | 0:3.6.5-3.el10_1.8 |
Vulnerabilities 1
-
High 8.2
Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)
A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header, so this mismatch can cause vhost confusion where a proxy r…