SUSE-SU-2022:14914-1

Details

Description of the patch:

This update for squid3 fixes the following issues:

CVE-2021-28651: Fixed a denial of service issue when processing URN resource identifiers (bsc#1185921).
CVE-2020-25097: Fixed an HTTP request smuggling issue (bsc#1183436).

Affected Packages

squid3

SUSE Linux Enterprise High Performance Computing 11 SP4SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSSSUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

0:3.1.23-8.16.37.18.1

References

ADVISORY

https://bugzilla.suse.com/1183436

ADVISORY

https://bugzilla.suse.com/1185921

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-March/010444.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-25097/

ADVISORY

https://www.suse.com/security/cve/CVE-2021-28651/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-202214914-1/