tocsin

Alpine/squid: high 8.6

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbid

Action: Upgrade squid to 4.14-r0 or later.

Affected

introducedfixedlast affected
2.04.14-r0-

Fixed versions

4.14-r0

Sources

published · modified · JSON