< back to search

gpp_maybe Security update for squid

SUSE-SLE-Module-Server-Applications-15-SP4-2023-4380

This update for squid fixes the following issues: - CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500). - CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495). - CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803). - CVE-2023-46848: Denial of Service in FTP (bsc#1216498).

Release Date

Nov 6 2023
References

Bugzilla: 1216495, 1216500, 1216498, 1216803
CVEs: CVE-2023-46848, CVE-2023-46724, CVE-2023-46846, CVE-2023-46847
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.4 aarch64

Packages

squid
Caching and forwarding HTTP web proxy

5.7-150400.3.12.1 lock rpm lock src

Server Applications Module 15.4 s390x

Packages

squid
Caching and forwarding HTTP web proxy

5.7-150400.3.12.1 lock rpm lock src

Server Applications Module 15.4 ppc64le

Packages

squid
Caching and forwarding HTTP web proxy

5.7-150400.3.12.1 lock rpm lock src

Server Applications Module 15.4 x86_64

Packages

squid
Caching and forwarding HTTP web proxy

5.7-150400.3.12.1 lock rpm lock src