< back to search

shield Security update for squid3

slessp4-squid3-13521

This update for squid3 fixes the following issues: Security issues fixed: - CVE-2018-1000024: DoS fix caused by incorrect pointer handling when processing ESI responses. This affects the default custom esi_parser (bsc#1077003). - CVE-2018-1000027: DoS fix caused by incorrect pointer handing whien processing ESI responses or downloading intermediate CA certificates (bsc#1077006).

Release Date

Mar 21 2018
References

Bugzilla: 1077003, 1077006
CVEs: CVE-2018-1000024, CVE-2018-1000027
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 11.4 ia64

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.37.3.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.37.3.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.37.3.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.37.3.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

Packages

squid3
Squid Version 3 WWW Proxy Server

3.1.23-8.16.37.3.1 lock rpm lock src