[ MDVSA-2014:114 ] squid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:114 http://www.mandriva.com/en/support/security/ Package : squid Date : June 10, 2014 Affected: Business Server 1.0 Problem Description: Updated squid packages fix security vulnerability: Due to incorrect...

YASAT - Yet Another Stupid Audit Tool

YASAT Yet Another Stupid Audit Tool is a simple stupid audit tool. Its goal is to be as simple as possible with minimum binary dependencies only sed, grep and cut Second goal is to document each test with maximum information and links to official documentation. It do many tests for checking...

openSUSE Security Update : squid (openSUSE-SU-2014:0559-1)

The SSLBump feature acts as TLS/SSL termination for clients. If this feature is enabled, squid can crash with range requests, leading to a potential Denial of Service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : squid (openSUSE-SU-2013:1436-1)

This squid update includes several security fixes and minor changes. - squid-2.7.x-bnc829084-CVE-2013-4115-BOrequesthandling. diff Squid advisory SQUID-20132, CVE-2013-4115, bnc829084 Specially crafted http requests can trigger a buffer overflow when squid attempts to resolve an overly long...

openSUSE Security Update : squid (openSUSE-SU-2013:1435-1)

This squid update includes several security fixes and minor changes. - squid-3.2.x-11823-bnc829084-CVE-2013-4115.diff fixes a buffer overflow involving very long hostnames. bnc829084 CVE-2013-4115 - squid-3.2.x-11823-bnc830319-CVE-2013-4123.diff fixes problems identifying a port number as specifi...

openSUSE Security Update : squid3 (openSUSE-SU-2013:0162-1)

update to 3.1.23 fix for bnc794954, CVE-2012-5643, SQUID:2012-1 - Additional fixes for CVE-2012-5643 / SQUID:2012-1 - http://www.squid-cache.org/Advisories/SQUID-20121.txt - https://vulners.com/cve/CVE-2012-5643 - removed 3.1.12 config, nobuilddates, swapdir patch - added FSF, config,...

openSUSE Security Update : squid (openSUSE-SU-2012:0102-1)

This update fixes the following security issues : - 587375: NULL deref via HTCP request CVE-2010-0639 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid-5580. The text description of this...

openSUSE Security Update : squid (openSUSE-SU-2012:0102-1)

This update fixes the following security issues : - 587375: NULL deref via HTCP request CVE-2010-0639 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid-5580. The text description of this...

Mandriva Linux Security Advisory : squid (MDVSA-2014:114)

Updated squid packages fix security vulnerability : Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

RedHat Update for squid RHSA-2014:0597-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for squid CESA-2014:0597 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : squid (CESA-2014:0597)

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

squid security update

CentOS Errata and Security Advisory CESA-2014:0597 Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base scor...

Scientific Linux Security Update : squid on SL6.x i386/x86_64 (20140603)

A denial of service flaw was found in the way Squid processed certain HTTPS requests when the SSL Bump feature was enabled. A remote attacker could send specially crafted requests that could cause Squid to crash. CVE-2014-0128 After installing this update, the squid service will be restarted...

Oracle Linux 6 : squid (ELSA-2014-0597)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0597 advisory. - Resolves: 1098134 - CVE-2014-0128 squid: denial of service when using SSL-Bump Tenable has extracted the preceding description block directly from the Oracle...

RHEL 6 : squid (RHSA-2014:0597)

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

squid: denial of service when using SSL-Bump

Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service assertion failure via a crafted range request, related to state management...

squid security update

7:3.1.10-20.3 - Resolves: 1098134 - CVE-2014-0128 squid: denial of service when using SSL-Bump 7:3.1.10-20.2 - revert: Resolves: 1039088 - issues with timeout on HTTPS connections 7:3.1.10-20.1 - Resolves: 1093072 - issues with timeout on HTTPS connections...

Updated squid package fixes CVE-2014-0128

Updated squid packages fix security vulnerability: Due to incorrect state management, Squid before 3.3.12 is vulnerable to a denial of service attack when processing certain HTTPS requests if the SSL-Bump feature is enabled CVE-2014-0128...