< back to search

shield Security update for squid

SUSE-SLE-SERVER-12-SP1-2017-57

This update for squid fixes the following issues: - CVE-2016-10002: Fixed incorrect processing of responses to If-None-Modified HTTP conditional requests. This allowed responses containing private data to clients it should not have reached (bsc#1016168) - CVE-2014-9749: Prevent nonce replay in Digest authentication, preventing the reuse of stale auth tokens (bsc#949942)

Release Date

Jan 12 2017
References

Bugzilla: 1016168, 949942
CVEs: CVE-2016-10002, CVE-2014-9749
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 12.1 ppc64le

Packages

squid
Squid Version 3.3 WWW Proxy Server

3.3.14-22.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.1 s390x

Packages

squid
Squid Version 3.3 WWW Proxy Server

3.3.14-22.6.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

Packages

squid
Squid Version 3.3 WWW Proxy Server

3.3.14-22.6.1 lock rpm lock src