Описание
Security update for squid
This update for squid fixes the following issues:
- CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)
Список пакетов
SUSE Linux Enterprise Server 12 SP5
squid-4.17-4.50.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
squid-4.17-4.50.1
Ссылки
- Link for SUSE-SU-2024:2270-1
- E-Mail link for SUSE-SU-2024:2270-1
- SUSE Security Ratings
- SUSE Bug 1227086
- SUSE CVE CVE-2024-37894 page
Описание
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:squid-4.17-4.50.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:squid-4.17-4.50.1
Ссылки
- CVE-2024-37894
- SUSE Bug 1227086