SUSE-SU-2020:1803-1

Details

Description of the patch:

This update for squid fixes the following issues:

CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake (bsc#1173304).
CVE-2019-18860: Fixed handling of invalid domain names in cachemgr.cgi (bsc#1167373).

Affected Packages

squid

SUSE Enterprise Storage 5SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

3.5.21-26.26.1

References

ADVISORY

https://bugzilla.suse.com/1167373

ADVISORY

https://bugzilla.suse.com/1173304

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-June/007055.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-18860/

ADVISORY

https://www.suse.com/security/cve/CVE-2020-14059/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20201803-1/