This bug was fixed in the package libsoup3 - 3.6.5-7
---------------
libsoup3 (3.6.5-7) unstable; urgency=high
* SECURITY UPDATE: Cherry-pick upstream fix to reject duplicate Host headers
- CVE-2025-14523 (Closes: #1122667)
* Add patch to fix tests after changes to the public suffix list
(LP: #2138374)
* Bump Standards Version to 4.7.3
-- Jeremy Bícha <[email protected]> Fri, 23 Jan 2026 12:34:38 -0500
** Changed in: libsoup3 (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2025-14523
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2138374
Title:
autopkgtest failure: tld-test.test
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libsoup2.4/+bug/2138374/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs