CLSA-2025-1753120992

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1753120992.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLSA-2025-1753120992
Upstream
Published
2025-07-21T18:03:16Z
Modified
2026-05-27T11:35:26.509319549Z
Summary
libsoup: Fix of 7 CVEs
Details
  • CVE-2025-32050: fix overflow in appendparamquoted()
  • CVE-2025-32052: fix heap buffer overflow in soupcontentsniffer_sniff()
  • CVE-2025-32053: fix heap buffer overflow in snifffeedor_html()
  • CVE-2025-32907: soup-message-headers: correct merge of ranges
  • CVE-2025-46420: fix leak in soupheaderparsequalitylist()
  • CVE-2025-46421: strip authentication credentails on cross-origin redirect
  • CVE-2025-2784: fix heap buffer over-read when sniffing content via the skipinsightwhitespace() function
References

Affected packages

TuxCare:OracleLinux:7 / libsoup

Package

Name
libsoup
Purl
pkg:rpm/tuxcare/libsoup?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.62.2-2.0.1.el7.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1753120992.json"

TuxCare:OracleLinux:7 / libsoup-devel

Package

Name
libsoup-devel
Purl
pkg:rpm/tuxcare/libsoup-devel?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.62.2-2.0.1.el7.tuxcare.els5

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1753120992.json"