MGASA-2018-0458 Updated squid packages fix security vulnerabilities

Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors CVE-2018-19131. Due to a memory leak in SNMP query rejection code, Squid is vulnerable to a denial of service attack CVE-2018-19132...

Friday Squid Blogging: Squid Sculptures

Pretty. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

SUSE-SU-2018:3786-1 Security update for squid

This update for squid fixes the following issues: Security issues fixed: - CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. - CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: - Create runtime...

SUSE SLES12 Security Update : squid (SUSE-SU-2018:3771-1)

This update for squid fixes the following issues : Security issues fixed : CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: Create runtime...

Squid Memory Leak Vulnerability

Squid is a caching and forwarding HTTP web proxy. A memory leak vulnerability exists in Squid prior to 4.4 when SNMP is enabled, which can be exploited by an attacker to cause a denial of service via SNMP packets...

Squid Cross-Site Scripting Vulnerability

Squid is a caching and forwarding HTTP web proxy. A cross-site scripting vulnerability exists in Squid prior to 4.4, which can be exploited by an attacker via a specially crafted X.509 certificate during HTTPS error page generation with a certificate error...

CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

DEBIAN-CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

DEBIAN-CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

Design/Logic Flaw

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

Memory corruption

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

CVE-2018-19132

CVE-2018-19132 : In Squid, a memory leak occurs when SNMP is enabled, exploitable via SNMP packets to cause denial of service by resource exhaustion. Public advisories confirm a fix in newer Squid releases across multiple distros (e.g., Debian squid3 updates, Mageia 2018-0458, Amazon ALAS/SR pack...

CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...