Red Hat Security AdvisoryRHSA-2015:2378
squid security and bug fix update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) squid-7:3.3.8-26.el7
- Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.3.8-26.el7
- Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.3.8-26.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.3.8-26.el7
Fixes 1 record
Priority LOW 27
Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.11402 · Published 2015-05-18 · Fixed CWE-20
