Branch sisyphus update bulletin.

Package squid updated to version 3.3.12-alt1 for branch sisyphus in task 116494.

Published: 2014-08-28

BDU:2015-00690

Уязвимость программного обеспечения Squid HTTP Proxy Server, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

Severity: MEDIUM (5.0)

References:

Published: 2014-09-11

BDU:2015-04283

Уязвимость операционной системы SUSE Linux Enterprise, позволяющая злоумышленнику нарушить доступность защищаемой информации

Severity: MEDIUM (5.0)

References:

CVE-2014-3609

Published: 2014-04-14
Modified: 2024-11-21

CVE-2014-0128

Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management.

Severity: MEDIUM (5.0)

References:

Published: 2014-09-11
Modified: 2024-11-21

CVE-2014-3609

HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."

Severity: MEDIUM (5.0)

References:

Version: 2.1.0

Branch sisyphus update on 2014-03-17

ALT-BU-2014-2638-1

ALT-PU-2014-1298-1

Closed vulnerabilities

BDU:2015-00690

BDU:2015-04283

CVE-2014-0128

CVE-2014-3609