Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1411-1

Опубликовано: 25 мая 2017
Источник: suse-cvrf

Описание

Security update for squidGuard

squidGuard was updated to fix one security issue:

  • CVE-2015-8936: Reflected cross site scripting vulnerability because of insufficient escaping (bsc#985612).

Список пакетов

SUSE Linux Enterprise Server 12 SP2
squidGuard-1.4-29.1
squidGuard-doc-1.4-29.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
squidGuard-1.4-29.1
squidGuard-doc-1.4-29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
squidGuard-1.4-29.1
squidGuard-doc-1.4-29.1

Ссылки

Описание

Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2:squidGuard-1.4-29.1
SUSE Linux Enterprise Server 12 SP2:squidGuard-doc-1.4-29.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:squidGuard-1.4-29.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:squidGuard-doc-1.4-29.1
Ссылки
Уязвимость SUSE-SU-2017:1411-1