Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Scientific Linux: SLSA-2017:0182-1 Moderate: Squid Remote Data Access Risk

Calendar Jan 24, 2017 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory security issue remote access moderate severity squid data exposure scientific linux
Moderate: squid security update 
Date: Tue, 24 Jan 2017 15:21:38 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: squid on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20170124152138.27100.99760@slpackages.fnal.gov>

Synopsis: Moderate: squid security update
Advisory ID: SLSA-2017:0182-1
Issue Date: 2017-01-24
CVE Numbers: CVE-2016-10002
--

Security Fix(es):

* It was found that squid did not properly remove connection specific
headers when answering conditional requests using a cached request. A
remote attacker could send a specially crafted request to an HTTP server
via the squid proxy and steal private data from other connections.
(CVE-2016-10002)
--

SL7
 x86_64
 squid-3.5.20-2.el7_3.2.x86_64.rpm
 squid-debuginfo-3.5.20-2.el7_3.2.x86_64.rpm
 squid-migration-script-3.5.20-2.el7_3.2.x86_64.rpm
 squid-sysvinit-3.5.20-2.el7_3.2.x86_64.rpm

- Scientific Linux Development Team