| Revision Date: | 2020-12-02 | Version: | 1 |
| Title: | Security update for squid (Critical) |
| Description: |
This update for squid fixes the following issues:
squid was updated to version 4.13:
- CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token characters for field-name (bsc#1175664).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1013712
1051510
1065729
1071995
1085030
1097975
1100352
1103200
1103206
1103659
1103661
1111666
1112178
1113956
1114279
1129715
1137526
1137595
1138872
1144333
1148868
1150660
1151178
1151927
1152107
1152624
1154064
1158983
1159058
1161016
1162002
1162063
1163309
1166985
1167104
1168081
1168959
1169194
1169514
1169771
1169795
1170011
1170442
1170592
1170617
1170618
1171124
1171424
1171529
1171530
1171558
1171732
1171739
1171743
1171753
1171759
1171835
1171841
1171868
1171904
1172247
1172257
1172344
1172458
1172484
1172537
1172538
1172687
1172719
1172759
1172775
1172781
1172782
1172783
1172871
1172872
1172999
1173060
1173074
1173146
1173265
1173280
1173284
1173428
1173455
1173514
1173567
1173573
1173659
1173746
1173818
1173820
1173825
1173826
1173833
1173838
1173839
1173845
1173857
1174113
1174115
1174122
1174123
1174186
1174187
1174296
1174343
1174356
1174409
1174438
1174462
1174543
1175664
1175665
1175671
CVE-2008-4936
CVE-2010-0405
CVE-2010-3609
CVE-2012-0786
CVE-2012-4453
CVE-2013-2126
CVE-2013-2127
CVE-2014-7202
CVE-2014-7203
CVE-2016-9798
CVE-2017-9120
CVE-2018-13301
CVE-2018-14851
CVE-2018-5804
CVE-2018-5813
CVE-2018-5815
CVE-2018-5816
CVE-2019-11703
CVE-2019-11704
CVE-2019-11705
CVE-2019-11706
CVE-2019-11707
CVE-2019-11708
CVE-2019-12730
CVE-2019-16239
CVE-2019-16746
CVE-2019-17542
CVE-2019-20810
CVE-2019-20908
CVE-2019-9718
CVE-2020-0305
CVE-2020-10766
CVE-2020-10767
CVE-2020-10768
CVE-2020-10769
CVE-2020-10773
CVE-2020-10781
CVE-2020-12771
CVE-2020-12888
CVE-2020-13974
CVE-2020-14416
CVE-2020-15049
CVE-2020-15393
CVE-2020-15780
CVE-2020-15810
CVE-2020-15811
CVE-2020-24606
SUSE-SU-2018:2337-1
SUSE-SU-2019:0005-1
SUSE-SU-2019:1683-1
SUSE-SU-2019:2737-1
SUSE-SU-2019:3046-1
SUSE-SU-2019:3184-1
SUSE-SU-2020:2107-1
SUSE-SU-2020:2442-1
|
| Platform(s): | SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Module for Advanced Systems Management 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 5
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed AND dnsmasq-2.71-0.12.13.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
bzip2-1.0.6-27 is installed
OR libbz2-1-1.0.6-27 is installed
OR libbz2-1-32bit-1.0.6-27 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
MozillaFirefox-38.4.0esr-51 is installed
OR MozillaFirefox-translations-38.4.0esr-51 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
MozillaFirefox-45.4.0esr-81 is installed
OR MozillaFirefox-translations-45.4.0esr-81 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND dracut-044-113 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
elfutils-0.158-6 is installed
OR libasm1-0.158-6 is installed
OR libdw1-0.158-6 is installed
OR libdw1-32bit-0.158-6 is installed
OR libebl1-0.158-6 is installed
OR libebl1-32bit-0.158-6 is installed
OR libelf-devel-0.158-6 is installed
OR libelf1-0.158-6 is installed
OR libelf1-32bit-0.158-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 is installed
AND Package Information
conntrack-tools-1.4.2-5.2 is installed
OR libnetfilter_cthelper-1.0.0-7.1 is installed
OR libnetfilter_cthelper0-1.0.0-7.1 is installed
OR libnetfilter_cttimeout-1.0.0-9.1 is installed
OR libnetfilter_cttimeout1-1.0.0-9.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP1 is installed
AND hawk2-1.0.1+git.1456406635.49e230d-12.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP2 is installed
AND Package Information
cluster-md-kmp-default-4.4.21-69 is installed
OR cluster-network-kmp-default-4.4.21-69 is installed
OR dlm-kmp-default-4.4.21-69 is installed
OR gfs2-kmp-default-4.4.21-69 is installed
OR ocfs2-kmp-default-4.4.21-69 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP3 is installed
AND Package Information
ctdb-4.6.9+git.59.c2cff9cea4c-3.17.1 is installed
OR samba-4.6.9+git.59.c2cff9cea4c-3.17.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP4 is installed
AND fence-agents-4.2.1+git.1537269352.7b1fd536-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
AND SuSEfirewall2-3.6.312.333-3.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Live Patching 12 is installed
AND Package Information
kgraft-patch-3_12_43-52_6-default-1-2.3 is installed
OR kgraft-patch-3_12_43-52_6-xen-1-2.3 is installed
OR kgraft-patch-SLE12_Update_5-1-2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
AND Package Information
puppet-3.8.5-15.3.3 is installed
OR puppet-server-3.8.5-15.3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Containers 12 is installed
AND Package Information
ruby2.1-rubygem-rack-1_4-1.4.5-8.10 is installed
OR rubygem-rack-1_4-1.4.5-8.10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 12 is installed
AND Package Information
compat-openssl098-0.9.8j-87.1 is installed
OR libopenssl0_9_8-0.9.8j-87.1 is installed
OR libopenssl0_9_8-32bit-0.9.8j-87.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 12 is installed
AND Package Information
kernel-ec2-3.12.39-47.1 is installed
OR kernel-ec2-devel-3.12.39-47.1 is installed
OR kernel-ec2-extra-3.12.39-47.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
AND squid-4.13-5.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 12 is installed
AND Package Information
apache2-mod_php5-5.5.14-15.1 is installed
OR php5-5.5.14-15.1 is installed
OR php5-bcmath-5.5.14-15.1 is installed
OR php5-bz2-5.5.14-15.1 is installed
OR php5-calendar-5.5.14-15.1 is installed
OR php5-ctype-5.5.14-15.1 is installed
OR php5-curl-5.5.14-15.1 is installed
OR php5-dba-5.5.14-15.1 is installed
OR php5-dom-5.5.14-15.1 is installed
OR php5-enchant-5.5.14-15.1 is installed
OR php5-exif-5.5.14-15.1 is installed
OR php5-fastcgi-5.5.14-15.1 is installed
OR php5-fileinfo-5.5.14-15.1 is installed
OR php5-fpm-5.5.14-15.1 is installed
OR php5-ftp-5.5.14-15.1 is installed
OR php5-gd-5.5.14-15.1 is installed
OR php5-gettext-5.5.14-15.1 is installed
OR php5-gmp-5.5.14-15.1 is installed
OR php5-iconv-5.5.14-15.1 is installed
OR php5-intl-5.5.14-15.1 is installed
OR php5-json-5.5.14-15.1 is installed
OR php5-ldap-5.5.14-15.1 is installed
OR php5-mbstring-5.5.14-15.1 is installed
OR php5-mcrypt-5.5.14-15.1 is installed
OR php5-mysql-5.5.14-15.1 is installed
OR php5-odbc-5.5.14-15.1 is installed
OR php5-openssl-5.5.14-15.1 is installed
OR php5-pcntl-5.5.14-15.1 is installed
OR php5-pdo-5.5.14-15.1 is installed
OR php5-pear-5.5.14-15.1 is installed
OR php5-pgsql-5.5.14-15.1 is installed
OR php5-pspell-5.5.14-15.1 is installed
OR php5-shmop-5.5.14-15.1 is installed
OR php5-snmp-5.5.14-15.1 is installed
OR php5-soap-5.5.14-15.1 is installed
OR php5-sockets-5.5.14-15.1 is installed
OR php5-sqlite-5.5.14-15.1 is installed
OR php5-suhosin-5.5.14-15.1 is installed
OR php5-sysvmsg-5.5.14-15.1 is installed
OR php5-sysvsem-5.5.14-15.1 is installed
OR php5-sysvshm-5.5.14-15.1 is installed
OR php5-tokenizer-5.5.14-15.1 is installed
OR php5-wddx-5.5.14-15.1 is installed
OR php5-xmlreader-5.5.14-15.1 is installed
OR php5-xmlrpc-5.5.14-15.1 is installed
OR php5-xmlwriter-5.5.14-15.1 is installed
OR php5-xsl-5.5.14-15.1 is installed
OR php5-zip-5.5.14-15.1 is installed
OR php5-zlib-5.5.14-15.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND Package Information
apache2-mod_php7-7.2.5-4.6 is installed
OR php7-7.2.5-4.6 is installed
OR php7-bcmath-7.2.5-4.6 is installed
OR php7-bz2-7.2.5-4.6 is installed
OR php7-calendar-7.2.5-4.6 is installed
OR php7-ctype-7.2.5-4.6 is installed
OR php7-curl-7.2.5-4.6 is installed
OR php7-dba-7.2.5-4.6 is installed
OR php7-devel-7.2.5-4.6 is installed
OR php7-dom-7.2.5-4.6 is installed
OR php7-enchant-7.2.5-4.6 is installed
OR php7-exif-7.2.5-4.6 is installed
OR php7-fastcgi-7.2.5-4.6 is installed
OR php7-fileinfo-7.2.5-4.6 is installed
OR php7-fpm-7.2.5-4.6 is installed
OR php7-ftp-7.2.5-4.6 is installed
OR php7-gd-7.2.5-4.6 is installed
OR php7-gettext-7.2.5-4.6 is installed
OR php7-gmp-7.2.5-4.6 is installed
OR php7-iconv-7.2.5-4.6 is installed
OR php7-intl-7.2.5-4.6 is installed
OR php7-json-7.2.5-4.6 is installed
OR php7-ldap-7.2.5-4.6 is installed
OR php7-mbstring-7.2.5-4.6 is installed
OR php7-mysql-7.2.5-4.6 is installed
OR php7-odbc-7.2.5-4.6 is installed
OR php7-opcache-7.2.5-4.6 is installed
OR php7-openssl-7.2.5-4.6 is installed
OR php7-pcntl-7.2.5-4.6 is installed
OR php7-pdo-7.2.5-4.6 is installed
OR php7-pear-7.2.5-4.6 is installed
OR php7-pear-Archive_Tar-7.2.5-4.6 is installed
OR php7-pgsql-7.2.5-4.6 is installed
OR php7-phar-7.2.5-4.6 is installed
OR php7-posix-7.2.5-4.6 is installed
OR php7-shmop-7.2.5-4.6 is installed
OR php7-snmp-7.2.5-4.6 is installed
OR php7-soap-7.2.5-4.6 is installed
OR php7-sockets-7.2.5-4.6 is installed
OR php7-sqlite-7.2.5-4.6 is installed
OR php7-sysvmsg-7.2.5-4.6 is installed
OR php7-sysvsem-7.2.5-4.6 is installed
OR php7-sysvshm-7.2.5-4.6 is installed
OR php7-tokenizer-7.2.5-4.6 is installed
OR php7-wddx-7.2.5-4.6 is installed
OR php7-xmlreader-7.2.5-4.6 is installed
OR php7-xmlrpc-7.2.5-4.6 is installed
OR php7-xmlwriter-7.2.5-4.6 is installed
OR php7-xsl-7.2.5-4.6 is installed
OR php7-zip-7.2.5-4.6 is installed
OR php7-zlib-7.2.5-4.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 11 SP2 is installed
AND unrar-3.80.2-2.8 is installed
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise Server 11 SP3 is installed
AND lxc-0.8.0-0.21.6 is installed
OR Package Information
SUSE Linux Enterprise Server for VMWare 11 SP3 is installed
AND lxc-0.8.0-0.21.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 11 SP3 is installed
AND Package Information
ark-4.3.5-0.3.3 is installed
OR kcalc-4.3.5-0.3.3 is installed
OR kcharselect-4.3.5-0.3.3 is installed
OR kdessh-4.3.5-0.3.3 is installed
OR kdf-4.3.5-0.3.3 is installed
OR kfloppy-4.3.5-0.3.3 is installed
OR kgpg-4.3.5-0.3.3 is installed
OR ktimer-4.3.5-0.3.3 is installed
OR kwalletmanager-4.3.5-0.3.3 is installed
OR kwikdisk-4.3.5-0.3.3 is installed
OR okteta-4.3.5-0.3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 is installed
AND Package Information
flac-1.3.0-6.1 is installed
OR libFLAC++6-1.3.0-6.1 is installed
OR libFLAC8-1.3.0-6.1 is installed
OR libFLAC8-32bit-1.3.0-6.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
libsndfile-1.0.25-25.1 is installed
OR libsndfile1-1.0.25-25.1 is installed
OR libsndfile1-32bit-1.0.25-25.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
bind-9.9.9P1-46 is installed
OR bind-chrootenv-9.9.9P1-46 is installed
OR bind-doc-9.9.9P1-46 is installed
OR bind-libs-9.9.9P1-46 is installed
OR bind-libs-32bit-9.9.9P1-46 is installed
OR bind-utils-9.9.9P1-46 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND ant-1.9.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
bluez-5.13-5.4 is installed
OR libbluetooth3-5.13-5.4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12-LTSS is installed
AND Package Information
kgraft-patch-3_12_55-52_45-default-2-2.3 is installed
OR kgraft-patch-3_12_55-52_45-xen-2-2.3 is installed
OR kgraft-patch-SLE12_Update_13-2-2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
AND Package Information
libX11-1.6.2-11 is installed
OR libX11-6-1.6.2-11 is installed
OR libX11-data-1.6.2-11 is installed
OR libX11-xcb1-1.6.2-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND Package Information
MozillaFirefox-45.2.0esr-45.2 is installed
OR MozillaFirefox-devel-45.2.0esr-45.2 is installed
OR firefox-fontconfig-2.11.0-2.1 is installed
OR firefox-fontconfig-devel-2.11.0-2.1 is installed
OR mozilla-nspr-4.12-29.1 is installed
OR mozilla-nspr-devel-4.12-29.1 is installed
OR mozilla-nss-3.21.1-35.1 is installed
OR mozilla-nss-devel-3.21.1-35.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
AND Package Information
finch-devel-2.10.9-8 is installed
OR libpurple-2.10.9-8 is installed
OR libpurple-devel-2.10.9-8 is installed
OR libpurple-lang-2.10.9-8 is installed
OR pidgin-devel-2.10.9-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
AND Package Information
ant-1.9.4-1 is installed
OR ant-jmf-1.9.4-1 is installed
OR ant-scripts-1.9.4-1 is installed
OR ant-swing-1.9.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
AND aaa_base-malloccheck-13.2+git20140911.61c1681-36 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 is installed
AND Package Information
finch-2.10.9-8.1 is installed
OR libpurple-2.10.9-8.1 is installed
OR libpurple-lang-2.10.9-8.1 is installed
OR libpurple-meanwhile-2.10.9-8.1 is installed
OR libpurple-tcl-2.10.9-8.1 is installed
OR pidgin-2.10.9-8.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
MozillaThunderbird-60.7.2-3.43 is installed
OR MozillaThunderbird-translations-common-60.7.2-3.43 is installed
OR MozillaThunderbird-translations-other-60.7.2-3.43 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
bluez-5.48-5.19 is installed
OR bluez-cups-5.48-5.19 is installed
|