Debian/libsoup3: high 8.2
A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processing. Common front proxies often honor the first Host: header,
Action: Upgrade libsoup3 to 3.6.5-7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.5-7 | - |
Fixed versions
| 3.6.5-7 |
Sources
- osv: DEBIAN-CVE-2025-14523#Debian:14/libsoup3
- https://security-tracker.debian.org/tracker/CVE-2025-14523
published · modified · JSON