p PatchFirst

SUSE-SU-2023:4698-1

SUSE-SU-2023:4698-1 · Security update for squid

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for squid fixes the following issues: - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow (bsc#1217813) - CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management (bsc#1217815) - Fix X-Forwarded-For Stack Overflow (bsc#1217654)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • squid SUSE:Linux Enterprise Module for Server Applications 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.7-150400.3.20.1

    Update to 5.7-150400.3.20.1

  • squid SUSE:Linux Enterprise Module for Server Applications 15 SP5

    Affected ranges
    • ECOSYSTEM: < 5.7-150400.3.20.1

    Update to 5.7-150400.3.20.1

  • squid openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 5.7-150400.3.20.1

    Update to 5.7-150400.3.20.1

  • squid openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 5.7-150400.3.20.1

    Update to 5.7-150400.3.20.1

Original sources

Check your server →