MGASA-2018-0458

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0458.html

Import Source

https://advisories.mageia.org/MGASA-2018-0458.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2018-0458

Related

CVE-2018-19131
CVE-2018-19132

Published

2018-11-17T22:23:26Z

Modified

2018-11-17T21:58:45Z

Summary

Updated squid packages fix security vulnerabilities

Details

Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors (CVE-2018-19131).

Due to a memory leak in SNMP query rejection code, Squid is vulnerable to a denial of service attack (CVE-2018-19132).

References

https://advisories.mageia.org/MGASA-2018-0458.html
https://bugs.mageia.org/show_bug.cgi?id=23780
http://www.squid-cache.org/Advisories/SQUID-2018_4.txt
http://www.squid-cache.org/Advisories/SQUID-2018_5.txt
https://www.openwall.com/lists/oss-security/2018/11/09/1

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2018-0458

Affected packages