SUSE-SU-2024:0296-1: Security update for squid
Published Feb 1, 2024
·Updated
This update for squid fixes the following issues: CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)
Affected Software
12 affected componentsFixes available
All of the following
SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
Any of the following
suse/squid<4.17-4.41.1
4.17-4.41.1
suse/squid-debuginfo<4.17-4.41.1
4.17-4.41.1
suse/squid-debugsource<4.17-4.41.1
4.17-4.41.1
All of the following
SUSE SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
Any of the following
suse/squid<4.17-4.41.1
4.17-4.41.1
suse/squid-debuginfo<4.17-4.41.1
4.17-4.41.1
suse/squid-debugsource<4.17-4.41.1
4.17-4.41.1
All of the following
SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
Any of the following
suse/squid<4.17-4.41.1
4.17-4.41.1
suse/squid-debuginfo<4.17-4.41.1
4.17-4.41.1
suse/squid-debugsource<4.17-4.41.1
4.17-4.41.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/squidto a version that resolves this vulnerability.Fixed in 4.17-4.41.1 - Upgrade
Upgrade
suse/squid-debuginfoto a version that resolves this vulnerability.Fixed in 4.17-4.41.1 - Upgrade
Upgrade
suse/squid-debugsourceto a version that resolves this vulnerability.Fixed in 4.17-4.41.1 - Upgrade
Upgrade
squidto a version that resolves this vulnerability.Patch SUSE-SLE-SERVER-12-SP5-2024-296=1
Event History
Feb 1, 2024
Advisory Published
via SUSE·12:30 PM