Tim Düsterhus

Cross-origin credential leak in HTTP stream wrapper redirects

Signed integer overflow in metaphone()

password_verify() always returns true for some invalid hashes

Red Hat Security Advisory: rh-haproxy18-haproxy security update

Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 security and bug fix update

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.9 bug fix and enhancement update

libxml streams use wrong content-type header when requesting a redirected resource

Header parser of http stream wrapper does not handle folded headers

Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP