Описание
Security update for squid3
This update for squid3 fixes the following issues:
Security issue fixed:
- CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling (bsc#1113668).
Список пакетов
SUSE Linux Enterprise Server 11 SP4
squid3-3.1.23-8.16.37.9.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
squid3-3.1.23-8.16.37.9.1
Ссылки
- Link for SUSE-SU-2018:3790-1
- E-Mail link for SUSE-SU-2018:3790-1
- SUSE Security Ratings
- SUSE Bug 1113668
- SUSE CVE CVE-2018-19131 page
Описание
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:squid3-3.1.23-8.16.37.9.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:squid3-3.1.23-8.16.37.9.1
Ссылки
- CVE-2018-19131
- SUSE Bug 1113668