Security update for squid (important)

An update that fixes one vulnerability is now available.

Description:

This update for squid fixes the following issues:

• CVE-2021-46784: Fixed DoS when processing gopher server responses.
  (bsc#1200907)

• Update to 5.6:

  • Improve handling of Gopher responses

• Changes in 5.5:

  • fixes regression Bug 5192: esi_parser default is incorrect
  • Bug 5177: clientca certificates sent to https_port clients
  • Bug 5090: Must(!request->pinnedConnection()) violation
  • Kid restart leads to persistent queue overflows, delays/timeouts

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.4:

  zypper in -t patch openSUSE-SLE-15.4-2022-2359=1

• SUSE Linux Enterprise Module for Server Applications 15-SP4:

  zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-2359=1