Security update for squid
This update for squid fixes the following issues: - CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)
- Mettez à jour vers 5.7-150400.3.32.1
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour squid au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 7
This update for squid fixes the following issues: - CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)
This update for squid fixes the following issues: - CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417).
This update for squid fixes the following issues: - CVE-2024-25617: Fixes denial of service in HTTP header parser (bsc#1219960) - CVE-2024-25111: Fixes Chunked Encoding Stack Overflow (bsc#1216715)
This update for squid fixes the following issues: - CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) - CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)
This update for squid fixes the following issues: - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow (bsc#1217813) - CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management (bsc#1217815) - Fix X-Forwarded-For Stack Overflow (bsc#1217654)
This update for squid fixes the following issues: - CVE-2023-46728: Remove gopher support (bsc#1216926). - Fixed overread in HTTP request header parsing (bsc#1217274).
This update for squid fixes the following issues: - CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500). - CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495). - CVE-2023-46724: Fix validation of certificates with CN=* (bsc#1216803). - CVE-2023-46848: Denial of Service in FTP (bsc#1216498).
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.