Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2268-1

Опубликовано: 02 июл. 2024
Источник: suse-cvrf

Описание

Security update for squid

This update for squid fixes the following issues:

  • Update to version 6.10
  • CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)

Список пакетов

Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:latest
squid-6.10-150600.3.6.1
Image proxy-squid-image
squid-6.10-150600.3.6.1
SUSE Linux Enterprise Module for Server Applications 15 SP6
squid-6.10-150600.3.6.1
openSUSE Leap 15.6
squid-6.10-150600.3.6.1

Ссылки

Описание

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

Затронутые продукты
Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:latest:squid-6.10-150600.3.6.1
Image proxy-squid-image:squid-6.10-150600.3.6.1
SUSE Linux Enterprise Module for Server Applications 15 SP6:squid-6.10-150600.3.6.1
openSUSE Leap 15.6:squid-6.10-150600.3.6.1
Ссылки