Fix incorrect parsing of the strict-transport-security (HSTS) header Fix buffer over-read via a crafted reply from a DNS server Resolves: bz#2209492