Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2510-1

Опубликовано: 12 окт. 2016
Источник: suse-cvrf

Описание

Security update for squidGuard

squidGuard was updated to fix one security issue.

This security issue was fixed:

  • CVE-2015-8936: Reflected cross site scripting vulnerability because of insufficient escaping (bsc#985612).

Список пакетов

SUSE Linux Enterprise Server 11 SP4
squidGuard-1.4-13.10.1
squidGuard-doc-1.4-13.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
squidGuard-1.4-13.10.1
squidGuard-doc-1.4-13.10.1

Ссылки

Описание

Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:squidGuard-1.4-13.10.1
SUSE Linux Enterprise Server 11 SP4:squidGuard-doc-1.4-13.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:squidGuard-1.4-13.10.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:squidGuard-doc-1.4-13.10.1
Ссылки