Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Mageia 8: 2022-0351 Severe: Squid Data Exposure & Buffer Overflow

mageia
Calendar Grey October 1, 2022
Dist Mageia Esm H88
Mageia 2022-0351 rectifies vulnerabilities within the squid package, such as risks of cache data leakage and issues related to buffer overflow.
Exposure of Sensitive Information in Cache Manager

Summary

Exposure of Sensitive Information in Cache Manager. (CVE-2022-41317) Buffer Over Read in SSPI and SMB Authentication. (CVE-2022-41318)

References

- https://bugs.mageia.org/show_bug.cgi?id=30883

- https://github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq

- https://github.com/squid-cache/squid/security/advisories/GHSA-394c-rr7q-6g78

- https://ubuntu.com/security/notices/USN-5641-1

- https://www.cve.org/CVERecord?id=CVE-2022-41317

- https://www.cve.org/CVERecord?id=CVE-2022-41318

Resolution

SRPMS

- 8/core/squid-4.17-1.2.mga8

Publication date: 01 Oct 2022
URL: https://advisories.mageia.org/MGASA-2022-0351.html
Type: security
CVE: CVE-2022-41317, CVE-2022-41318

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here