Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

openSUSE: 2011:1020-2 Critical: squid Buffer Overflow Attack

opensuse
Calendar Grey September 7, 2011
Dist Opensuse Esm H88
Crucial openSUSE patch resolves squid memory overflow weaknesses in the Gopher interpreter.
An update that fixes one vulnerability is now available

Description

This update of squid3 fixes a buffer overflow vulnerability

in the Gopher reply parser code (CVE-2011-3205).

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch squid3-5094

- openSUSE 11.3:

zypper in -t patch squid3-5094

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64):

squid3-3.1.11-4.7.1

- openSUSE 11.3 (i586 x86_64):

squid3-3.0.STABLE25-2.3.1

References

https://www.suse.com/security/cve/CVE-2011-3205.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2011:1018-1
Rating: important
Affected Products: openSUSE 11.4 openSUSE 11.3 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here