tocsin

Debian/squid: medium 5.3

An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently.

Action: Upgrade squid to 4.9-1 or later.

Affected

introducedfixedlast affected
04.9-1-

Fixed versions

4.9-1

Sources

published · modified · JSON