gpp_maybe Security update for squid3

slessp4-squid3-12701

This update for squid3 fixes the following issues: - Multiple issues in pinger ICMP processing. (CVE-2014-7141, CVE-2014-7142) - CVE-2016-3947: Buffer overrun issue in pinger ICMPv6 processing. (bsc#973782) - CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010) - Fix multiple Denial of Service issues in HTTP Response processing. (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572, bsc#968392, bsc#968393, bsc#968394, bsc#968395) - Regression caused by the DoS fixes above (bsc#993299) - CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783) - CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553) - CVE-2016-4052, CVE-2016-4053, CVE-2016-4054: * fixes multiple issues in ESI processing (bsc#976556) - CVE-2016-4556: fixes double free vulnerability in Esi.cc (bsc#979008) - CVE-2015-5400: Improper Protection of Alternate Path (bsc#938715) - CVE-2014-6270: fix off-by-one in snmp subsystem (bsc#895773) - Memory leak in squid3 when using external_acl (bsc#976708)

• Release Date
  Aug 16 2016
• References
  Bugzilla: 979009, 979008, 902197, 979010, 979011, 895773, 973782, 973783, 976553, 976556, 963539, 967011, 968395, 968394, 968393, 968392, 976708, 938715, 993299
  CVEs: CVE-2014-0128, CVE-2014-6270, CVE-2014-7142, CVE-2014-7141, CVE-2011-3205, CVE-2012-5643, CVE-2016-2572, CVE-2016-2571, CVE-2016-2570, CVE-2016-4052, CVE-2016-4053, CVE-2016-4051, CVE-2016-4054, CVE-2016-2390, CVE-2011-4096, CVE-2016-3947, CVE-2013-0188, CVE-2016-3948, CVE-2016-4553, CVE-2016-4556, CVE-2016-4555, CVE-2016-4554, CVE-2015-5400, CVE-2016-2569, CVE-2013-4115
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 i586

• Packages
  squid3
  Squid Version 3 WWW Proxy Server

  3.1.23-8.16.30.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  squid3
  Squid Version 3 WWW Proxy Server

  3.1.23-8.16.30.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  squid3
  Squid Version 3 WWW Proxy Server

  3.1.23-8.16.30.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  squid3
  Squid Version 3 WWW Proxy Server

  3.1.23-8.16.30.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  squid3
  Squid Version 3 WWW Proxy Server

  3.1.23-8.16.30.1 lock rpm lock src