Описание
Security update for squid
This update for squid fixes the following issues:
- Update to version 6.10
- CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)
Список пакетов
SUSE Linux Enterprise Module for Server Applications 15 SP6
squid-6.10-150600.3.6.1
openSUSE Leap 15.6
squid-6.10-150600.3.6.1
Ссылки
- Link for SUSE-SU-2024:2268-1
- E-Mail link for SUSE-SU-2024:2268-1
- SUSE Security Ratings
- SUSE Bug 1227086
- SUSE CVE CVE-2024-37894 page
Описание
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.
Затронутые продукты
SUSE Linux Enterprise Module for Server Applications 15 SP6:squid-6.10-150600.3.6.1
openSUSE Leap 15.6:squid-6.10-150600.3.6.1
Ссылки
- CVE-2024-37894
- SUSE Bug 1227086