Ubuntu: Security Advisory (USN-2921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 445-2] squid3 regression update

Package : squid3 Version : 3.1.6-1.2+squeeze7 CVE ID : CVE-2016-2569 Debian Bug : 816601 The backported patch to solve CVE-2016-2569 yielded to failed assertions that made squid3 to crash when closing connections. The fix for this CVE strongly relies on exception handling present in more recent...

DLA-445-2 squid3 - regression update

Bulletin has no description...

Debian DLA-445-2 : squid3 regression update

The backported patch to solve CVE-2016-2569 yielded to failed assertions that made squid3 to crash when closing connections. The fix for this CVE strongly relies on exception handling present in more recent versions of squid3, that I failed to identify in the previous update. I have reverted the...

[SECURITY] [DLA 445-1] squid3 security update

Package : squid3 Version : 3.1.6-1.2+squeeze6 CVE ID : CVE-2016-2569 CVE-2016-2571 Debian Bug : 816011 Several security issues have been discovered in the Squid caching proxy. CVE-2016-2569 Squid wrongly checked boundaries of String data, making it possible for remote attackers to cause a...

DLA-445-1 squid3 - security update

Bulletin has no description...

[SECURITY] [DSA 3327-1] squid3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3327-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 03, 2015 https://www.debian.org/security/faq -...

Debian DSA-3327-1 : squid3 - security update

Alex Rousskov of The Measurement Factory discovered that Squid3, a fully featured web proxy cache, does not correctly handle CONNECT method peer responses when configured with cachepeer and operating on explicit proxy traffic. This could allow remote clients to gain unrestricted access through a...

[SECURITY] [DSA 3327-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3327-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3327-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3327-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 03, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3327-1 (squid3 - security update)

Alex Rousskov of The Measurement Factory discovered that Squid3, a fully featured web proxy cache, does not correctly handle CONNECT method peer responses when configured with cachepeer and operating on explicit proxy traffic. This could allow remote clients to gain unrestricted access through a...

DSA-3327-1 squid3 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3327-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-286-1 : squid3 security update

Alex Rousskov discovered that Squid configured with cachepeer and operating on explicit proxy traffic does not correctly handle CONNECT method peer responses. In some configurations, it allows remote clients to bypass security in an explicit gateway proxy. For Debian 6 Squeeze, this problem has...

[SECURITY] [DLA 286-1] squid3 security update

Package : squid3 Version : 3.1.6-1.2+squeeze5 CVE ID : CVE-2015-5400 Debian Bug : 793128 Alex Rousskov discovered that Squid configured with cachepeer and operating on explicit proxy traffic does not correctly handle CONNECT method peer responses. In some configurations, it allows remote clients ...

DLA-286-1 squid3 - security update

Bulletin has no description...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the accessibility of protected information.

The vulnerability of the squid3 package in the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Debian DLA-45-1 : squid3 security update

CVE-2014-3609: Denial of Service in Range header processing. Ignore Range headers with unidentifiable byte-range values. If squid is unable to determine the byte value for ranges, treat the header as invalid. NOTE: Tenable Network Security has extracted the preceding description block directly fr...

[USN-2422-1] Squid vulnerabilities

========================================================================== Ubuntu Security Notice USN-2422-1 November 25, 2014 squid3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9729)

Squid3 was updated to fix a denial of service in Range Header processing, which would have allowed proxy users to crash the squid proxy process. CVE-2014-3609 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...