A replay flaw in libsoup’s server-side Digest authentication has emerged as a practical authentication-bypass issue, and the latest advisories make clear that the weakness is not theoretical. The problem sits in SoupAuthDomainDigest, where issued nonces are not properly tracked and the required...