Red Hat Security AdvisoryRHSA-2017:0182
squid security update
Released 2017-01-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) squid-7:3.5.20-2.el7_3.2, squid-migration-script-7:3.5.20-2.el7_3.2
- Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.5.20-2.el7_3.2
- Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.5.20-2.el7_3.2, squid-migration-script-7:3.5.20-2.el7_3.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.5.20-2.el7_3.2
Fixes 1 record
Priority MEDIUM 43
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leake…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.07038 · Published 2017-01-27 · Partial fix CWE-200
