< back to search

shield Security update for squid3

slessp4-squid3-12934

This update for squid3 fixes the following issues: - CVE-2016-10002: Fixed incorrect processing of responses to If-None-Modified HTTP conditional requests. This allowed responses containing private data to clients it should not have reached (bsc#1016168) - CVE-2014-9749: Prevent nonce replay in Digest authentication, preventing the reuse of stale auth tokens (bsc#949942)

Release Date

Jan 11 2017
References

Bugzilla: 1016168, 949942
CVEs: CVE-2016-10002, CVE-2014-9749
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 11.4 s390x

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.36.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.36.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.36.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 ia64

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.36.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.36.1 lock rpm lock src