OESA-2026-1407 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a...

SUSE-SU-2019:0339-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3822: Fixed a NTLMv2 type-3 header stack buffer overflow bsc1123377. - CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response bsc1123378. - CVE-2018-16890: Fixed an out-of-bounds buffer read in NTLM...

FreeBSD : cURL -- Multiple vulnerabilities (301a01b7-d50e-11e7-ac58-b499baebfeaf)

The cURL project reports : - NTLM buffer overflow via integer overflow CVE-2017-8816libcurl contains a buffer overrun flaw in the NTLM authentication code. The internal function Curlntlmcoremkntlmv2hash sums up the lengths of the user name + password = SUM and multiplies the sum by two = SIZE to...

Curl < 7.13.1 NTLM Stack-based Buffer Overflow

Binary data 2640.prm...

Squid < 2.5.STABLE6 NTLM Buffer Overflow

Binary data 2185.prm...