Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2553-1

Опубликовано: 26 июл. 2022
Источник: suse-cvrf

Описание

Security update for squid

This update for squid fixes the following issues:

  • CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
  • CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)

Список пакетов

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
squid-4.17-150000.5.32.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM
squid-4.17-150000.5.32.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE
squid-4.17-150000.5.32.1
SUSE Enterprise Storage 6
squid-4.17-150000.5.32.1
SUSE Enterprise Storage 7
squid-4.17-150000.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Module for Server Applications 15 SP3
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server 15 SP1-BCL
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server 15 SP1-LTSS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server 15 SP2-BCL
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server 15 SP2-LTSS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server 15-LTSS
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server for SAP Applications 15
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
squid-4.17-150000.5.32.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
squid-4.17-150000.5.32.1
SUSE Manager Proxy 4.1
squid-4.17-150000.5.32.1
SUSE Manager Retail Branch Server 4.1
squid-4.17-150000.5.32.1
SUSE Manager Server 4.1
squid-4.17-150000.5.32.1
openSUSE Leap 15.3
squid-4.17-150000.5.32.1

Ссылки

Описание

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.

Затронутые продукты
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:squid-4.17-150000.5.32.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:squid-4.17-150000.5.32.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:squid-4.17-150000.5.32.1
SUSE Enterprise Storage 6:squid-4.17-150000.5.32.1
Ссылки

Описание

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Затронутые продукты
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:squid-4.17-150000.5.32.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:squid-4.17-150000.5.32.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:squid-4.17-150000.5.32.1
SUSE Enterprise Storage 6:squid-4.17-150000.5.32.1
Ссылки
Уязвимость SUSE-SU-2022:2553-1