[CLSA-2021:1634925600] Fix of CVE: CVE-2020-14058, CVE-2020-15049
Type:
security
Severity:
moderate
Release date:
2021-10-22
Description:
- CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of service - CVE-2020-15049: fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack
Updated packages:
  • squid-3.1.23-30.el6.cloudlinux.els.x86_64.rpm
    sha:9477c3042f87383ce0051ba47184caf9aacbd609
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.