shield Security update for squid

SUSE-SLE-SERVER-12-SP5-2020-487

This update for squid to version 4.10 fixes the following issues: Security issues fixed: - CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway (bsc#1162689). - CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8450: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687). - CVE-2020-8517: Fixed a buffer overflow in ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691). Non-security issue fixed: - Improved cache handling with chunked responses.

• Release Date
  Feb 26 2020
• References
  Bugzilla: 1162687, 1162689, 1162691
  CVEs: CVE-2019-12528, CVE-2020-8449, CVE-2020-8450, CVE-2020-8517
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  squid
  Caching and forwarding HTTP web proxy

  4.10-4.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  squid
  Caching and forwarding HTTP web proxy

  4.10-4.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  squid
  Caching and forwarding HTTP web proxy

  4.10-4.6.1 lock rpm lock src

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  squid
  Caching and forwarding HTTP web proxy

  4.10-4.6.1 lock rpm lock src