File _patchinfo of Package patchinfo.6788
<patchinfo incident="6788"> <issue id="1077003" tracker="bnc">VUL-0: CVE-2018-1000024: squid,squid3: SQUID-2018_1 Denial of Service issue in ESI Response processing.</issue> <issue id="1077006" tracker="bnc">VUL-0: CVE-2018-1000027: squid,squid3: SQUID-2018_2 Denial of Service issue in HTTP Message processing.</issue> <issue id="2018-1000024" tracker="cve" /> <issue id="2018-1000027" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>adamm</packager> <description>This update for squid fixes the following issues: Security issues fixed: - CVE-2018-1000024: DoS fix caused by incorrect pointer handling when processing ESI responses. This affects the default custom esi_parser (bsc#1077003). - CVE-2018-1000027: DoS fix caused by incorrect pointer handing whien processing ESI responses or downloading intermediate CA certificates (bsc#1077006). </description> <summary>Security update for squid</summary> </patchinfo>