SUSE Linux 11-SP4: 2016:2089-1 Important: Squid3 Multiple Issues Fixed
suse
August 16, 2016
An update that fixes 25 vulnerabilities is now available
Summary
This update for squid3 fixes the following issues: - Multiple issues in pinger ICMP processing. (CVE-2014-7141, CVE-2014-7142) - CVE-2016-3947: Buffer overrun issue in pinger ICMPv6 processing. (bsc#973782) - CVE-2016-4554: fix header smuggling issue in HTTP Request processing (bsc#979010) - Fix multiple Denial of Service issues in HTTP Response processing. (CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-2572, bsc#968392, bsc#968393, bsc#968394, bsc#968395) - Regression caused by the DoS fixes above (bsc#993299) - CVE-2016-3948: Fix denial of service in HTTP Response processing (bsc#973783) - CVE-2016-4051: fixes buffer overflow in cachemgr.cgi (bsc#976553) - CVE-2016-4052, CVE-2016-4053, CVE-2016-4054: * fixes multiple issues in ESI processing (bsc#976556)
Topics Covered
References
#895773 #902197 #938715 #963539 #967011 #968392
#968393 #968394 #968395 #973782 #973783 #976553
#976556 #976708 #979008 #979009 #979010 #979011
#993299
Cross- CVE-2011-3205 CVE-2011-4096 CVE-2012-5643
CVE-2013-0188 CVE-2013-4115 CVE-2014-0128
CVE-2014-6270 CVE-2014-7141 CVE-2014-7142
CVE-2015-5400 CVE-2016-2390 CVE-2016-2569
CVE-2016-2570 CVE-2016-2571 CVE-2016-2572
CVE-2016-3947 CVE-2016-3948 CVE-2016-4051
CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
CVE-2016-4553 CVE-2016-4554 CVE-2016-4555
CVE-2016-4556
Affected Products:
SUSE Linux Enterprise Server 11-SP4
SUSE Linux Enterprise Debuginfo 11-SP4
https://www.suse.com/security/cve/CVE-2011-3205.html
https://www.suse.com/security/cve/CVE-2011-4096.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2016:2089-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!