SUSE-SU-2020:2471-1
Security update for squid
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for squid fixes the following issues: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token characters for field-name (bsc#1175664).
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.2 | squid | 3.5.21-26.32.1 |
| SUSE Linux Enterprise 12.3 | squid | 3.5.21-26.32.1 |
| SUSE Linux Enterprise 12.4 | squid | 3.5.21-26.32.1 |
Referanslar
- https://bugzilla.suse.com/1175664
- https://bugzilla.suse.com/1175665
- https://bugzilla.suse.com/1175671
- https://lists.suse.com/pipermail/sle-security-updates/2020-September/007341.html
- https://www.suse.com/security/cve/CVE-2020-15810/
- https://www.suse.com/security/cve/CVE-2020-15811/
- https://www.suse.com/security/cve/CVE-2020-24606/
- https://www.suse.com/support/security/rating/