Univention Bugzilla – Full Text Bug Listing |
Summary: | squid3: Denial of service (4.0) | ||
---|---|---|---|
Product: | UCS | Reporter: | Moritz Muehlenhoff <jmm> |
Component: | Security updates | Assignee: | Daniel Tröder <troeder> |
Status: | CLOSED FIXED | QA Contact: | Felix Botner <botner> |
Severity: | minor | ||
Priority: | P5 | CC: | gohmann, requate, walkenhorst |
Version: | UCS 4.0 | Flags: | requate:
Patch_Available+
|
Target Milestone: | UCS 4.0-3-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
What kind of report is it?: | --- | What type of bug is this?: | --- |
Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
User Pain: | Enterprise Customer affected?: | ||
School Customer affected?: | ISV affected?: | ||
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | Bug group (optional): | ||
Max CVSS v3 score: |
Description
Moritz Muehlenhoff
2014-11-26 11:30:18 CET
All of the three issues above have been classified as "Minor issue" in Debian. Fixed in 3.1.20-2.2+deb7u3: * Squid configured with cache_peer and operating on explicit proxy traffic does not correctly handle CONNECT method peer responses (CVE-2015-5400) * squid3 3.1.20-2.2+deb7u3 was imported and build to scope errata4.0-3. * YAML (r63405): 2015-09-02-squid3.yaml OK - squid3 3.1.20-2 OK - ucs-test-proxy OK - YAML |