shield Security update for squid

SUSE-SLE-Module-Server-Applications-15-SP1-2020-493

This update for squid to version 4.10 fixes the following issues: Security issues fixed: - CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway (bsc#1162689). - CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8450: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8517: Fixed a buffer overflow in ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691). Non-security issue fixed: - Improved cache handling with chunked responses.

Release Date

Feb 26 2020
References

Bugzilla: 1162687, 1162689, 1162691
CVEs: CVE-2019-12528, CVE-2020-8449, CVE-2020-8450, CVE-2020-8517
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.1 ppc64le

Packages

squid
Caching and forwarding HTTP web proxy

4.10-5.14.1 lock rpm lock src

Server Applications Module 15.1 s390x

Packages

squid
Caching and forwarding HTTP web proxy

4.10-5.14.1 lock rpm lock src

Server Applications Module 15.1 aarch64

Packages

squid
Caching and forwarding HTTP web proxy

4.10-5.14.1 lock rpm lock src

Server Applications Module 15.1 x86_64

Packages

squid
Caching and forwarding HTTP web proxy

4.10-5.14.1 lock rpm lock src