Red Hat Security Advisory

RHSA-2017:0183

squid34 security update

Released 2017-01-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) squid34-7:3.4.14-9.el6_8.4
Red Hat Enterprise Linux Workstation (v. 6) squid34-7:3.4.14-9.el6_8.4

Fixes 1 record

TI-2016-08099 CVE-2016-10002 · GHSA-mgr8-2fmh-mcqw

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid…

MEDIUM 43

Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leake…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07038 Published 2017-01-27 Partial fix CWE-200