AZL-40842 CVE-2018-7159 affecting package rubygem-http_parser for versions less than 0.8.0-1

The HTTP parser in all current versions of Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. The HTTP specification does not allow for spaces in the Content-Length value and the Node.js HTTP parser has been...

openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-774)

This update for libtorrent-rasterbar fixes the following issues : - CVE-2016-5301: Crash on invalid input in httpparser could have allowed a remote attacker to perform a denial of service attack boo983228. In addition, the package was updated to 1.0.9 / 1.16.19, fixing various upstream bugs...

openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-751)

This update for libtorrent-rasterbar fixes the following issues : - CVE-2016-5301: Crash on invalid input in httpparser could have allowed a remote attacker to perform a denial of service attack boo983228. In addition, the package was updated to 1.0.9 / 1.16.19, fixing various upstream bugs...