Описание
Security update for squid
This update for squid fixes the following issues:
- CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
- CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
Список пакетов
SUSE Linux Enterprise Server 12 SP5
squid-4.17-4.24.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
squid-4.17-4.24.1
Ссылки
- Link for SUSE-SU-2022:2367-1
- E-Mail link for SUSE-SU-2022:2367-1
- SUSE Security Ratings
- SUSE Bug 1185923
- SUSE Bug 1186654
- SUSE Bug 1200907
- SUSE CVE CVE-2021-33620 page
- SUSE CVE CVE-2021-46784 page
Описание
Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:squid-4.17-4.24.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:squid-4.17-4.24.1
Ссылки
- CVE-2021-33620
- SUSE Bug 1185923
- SUSE Bug 1186654
Описание
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:squid-4.17-4.24.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:squid-4.17-4.24.1
Ссылки
- CVE-2021-46784
- SUSE Bug 1200907