Friday Squid Blogging: Cotton-and-Squid-Bone Sponge

News: A sponge made of cotton and squid bone that has absorbed about 99.9% of microplastics in water samples in China could provide an elusive answer to ubiquitous microplastic pollution in water across the globe, a new report suggests. … The study tested the material in an irrigation ditch, a...

Photon OS 3.0: Squid PHSA-2024-3.0-0809

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0809. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Friday Squid Blogging: Anniversary Post

I made my first squid post nineteen years ago this week. Between then and now, I posted something about squid every week with maybe only a few exceptions. There is a lot out there about squid, even more if you count the other meanings of the word. Blog moderation policy...

Photon OS 5.0: Squid PHSA-2024-5.0-0429

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0429. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Squid PHSA-2024-4.0-0726

An update of the squid package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0726. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLSA-2024-1735311253 squid: Fix of CVE-2023-5824

CVE-2023-5824: do not send serialized HTTP response header bytes in storeClientCopy answers. Ignore serialized header size when calling storeClientCopy...

CLSA-2024-1735126310 squid: Fix of CVE-2023-46724

CVE-2023-46724: fix validation of certificates with CN=...

Friday Squid Blogging: Squid Sticker

A sticker for your water bottle. Blog moderation policy...

CLSA-2024-1734542622 squid: Fix of CVE-2024-23638

CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry...

RHSA-2024:11049 Red Hat Security Advisory: squid security update

Bulletin has no description...

Important Photon OS Security Update - PHSA-2024-5.0-0429

Updates of 'squid' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-3.0-0809

Updates of 'squid' packages of Photon OS have been released...

RHEL 7 : squid (RHSA-2024:11049)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11049 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid:...

Critical Photon OS Security Update - PHSA-2024-4.0-0726

Updates of 'squid', 'cups' packages of Photon OS have been released...

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

Friday Squid Blogging: Biology and Ecology of the Colossal Squid

Good survey paper. Blog moderation policy...

squid-6.12-1.1 on GA media (moderate)

squid-6.12-1.1 on GA media Announcement ID: openSUSE-SU-2024:14566-1 Rating: moderate Cross-References: CVE-2024-45802 CVSS scores: CVE-2024-45802 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2024-45802 SUSE : 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H...

OPENSUSE-SU-2024:14566-1 squid-6.12-1.1 on GA media

These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20241203-14

Squid proxy server vulnerability is related to errors in input data processing. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service by sending specially crafted ESI packets. specially crafted ESI packets...