{"id":"CVE-2020-14059","aliases":["EUVD-2020-6221","MGASA-2020-0332","SUSE-SU-2020:14460-1","SUSE-SU-2020:1769-1","SUSE-SU-2020:1770-1","SUSE-SU-2020:1803-1","openSUSE-SU-2020:0910-1","openSUSE-SU-2020:0914-1","openSUSE-SU-2024:11403-1"],"status":"published","title":"Updated squid packages fix security vulnerability","description":"An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04408,"percentile":0.91411,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-662"],"published":"2020-06-26T06:03:27Z","modified":"2026-10-24T10:30:50Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"squid","fixed_in":["4.12-5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"squid","fixed_in":["4.12-5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"squid","fixed_in":["4.12-5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"squid","fixed_in":["4.12-5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"squid","fixed_in":["4.12-5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"squid","fixed_in":["4.12-5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"squid","fixed_in":["4.12-4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"squid","fixed_in":["4.12-4.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"squid","fixed_in":["4.12-lp151.2.21.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"squid","fixed_in":["4.12-lp152.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-2.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.37.12.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.37.12.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-lp151.2.21.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16-1.5"}]}],"bundled":40}],"products":[{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"http://www.squid-cache.org/Versions/v5/changesets/squid-5-7a5af8db8e0377c06ed9ffbdcb1334389c7cd8ab.patch","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2020_5.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210312-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0332.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26884","tags":["report"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2020_6.txt","tags":["web"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014460-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140738","tags":["report"]},{"url":"https://bugzilla.suse.com/1141329","tags":["report"]},{"url":"https://bugzilla.suse.com/1141332","tags":["report"]},{"url":"https://bugzilla.suse.com/1156323","tags":["report"]},{"url":"https://bugzilla.suse.com/1156324","tags":["report"]},{"url":"https://bugzilla.suse.com/1156326","tags":["report"]},{"url":"https://bugzilla.suse.com/1156328","tags":["report"]},{"url":"https://bugzilla.suse.com/1156329","tags":["report"]},{"url":"https://bugzilla.suse.com/1162687","tags":["report"]},{"url":"https://bugzilla.suse.com/1162689","tags":["report"]},{"url":"https://bugzilla.suse.com/1162691","tags":["report"]},{"url":"https://bugzilla.suse.com/1167373","tags":["report"]},{"url":"https://bugzilla.suse.com/1169659","tags":["report"]},{"url":"https://bugzilla.suse.com/1170313","tags":["report"]},{"url":"https://bugzilla.suse.com/1170423","tags":["report"]},{"url":"https://bugzilla.suse.com/1173304","tags":["report"]},{"url":"https://bugzilla.suse.com/1173455","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8517","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201769-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201770-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201803-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3N4T4HIMYDNUD3XGFYRIRAG5CG2WS7Q7/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M2HFP25KYVUFFO3JWN66D4EIMO4MFMIM/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31806","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-14059","description":"An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.","status":"published","published":"2020-06-30T18:23:39Z","modified":"2024-08-04T12:32:14.706Z","updated_at":"2026-11-02T14:35:46.873079Z"}],"euvd":[{"id":"EUVD-2020-6221","description":"An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.","status":"published","published":"2020-06-30T18:23:39Z","modified":"2024-08-04T12:32:14Z","updated_at":"2026-11-03T03:07:35.697348Z"}],"nvd":[{"id":"CVE-2020-14059","description":"An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.","status":"published","published":"2020-06-30T19:15:11.223Z","modified":"2026-06-17T02:54:10.03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-662"],"updated_at":"2026-11-02T14:06:08.145904Z"}],"osv":[{"id":"CVE-2020-14059","description":"An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.","status":"published","published":"2020-06-30T19:15:11.223Z","modified":"2026-10-24T10:30:50.643425327Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"MGASA-2020-0332","title":"Updated squid packages fix security vulnerability","description":"Due to use of a potentially dangerous function Squid and the default\ncertificate validation helper are vulnerable to a Denial of Service attack when\nprocessing TLS certificates. This attack is limited to Squid built with OpenSSL\nfeatures and opening peer or server connections for HTTPS traffic and SSL-Bump\nserver handshakes (CVE-2020-14058).\n\nDue to incorrect input validation Squid is vulnerable to a Request Smuggling\nand Poisoning attack against the HTTP cache. This attack requires an upstream\nserver to participate in the smuggling and generate the poison response\nsequence. Most popular server software are not vulnerable to participation in\nthis attack (CVE-2020-14059).\n","status":"published","published":"2020-08-18T18:47:25Z","modified":"2026-04-16T04:42:16.700258128Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0910-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\nsquid was updated to version 4.12 \n\nSecurity issue fixed: \n\n- CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server \n  during TLS Handshake (bsc#1173304).\n  \nOther issues addressed: \n\n- Reverted to slow search for new SMP shm pages due to a regression \n- Fixed an issue where negative responses were never cached\n- Fixed stall if transaction was overwriting a recently active cache entry\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-06-29T18:20:12Z","modified":"2026-02-04T04:12:27.402488Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0914-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\nsquid was updated to version 4.12 \n\nSecurity issue fixed: \n\n- CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server \n  during TLS Handshake (bsc#1173304).\n  \nOther issues addressed: \n\n- Reverted to slow search for new SMP shm pages due to a regression \n- Fixed an issue where negative responses were never cached\n- Fixed stall if transaction was overwriting a recently active cache entry\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-06-29T18:20:37Z","modified":"2025-05-07T18:11:29.928958Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11403-1","title":"squid-4.16-1.5 on GA media","description":"These are all security issues fixed in the squid-4.16-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:28:26.444707Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:14460-1","title":"Security update for squid3","description":"This update for squid3 fixes the following issues:\n\n- Fixed a Cache Poisoning and Request Smuggling\n  attack (CVE-2020-15049, bsc#1173455)\n- Fixed incorrect buffer handling that can\n  result in cache poisoning, remote execution, and\n  denial of service attacks when processing ESI responses\n  (CVE-2019-12519, CVE-2019-12521, bsc#1169659)\n\n- Fixed handling of hostname in\n  cachemgr.cgi (CVE-2019-18860, bsc#1167373)\n- Fixed a potential remote execution vulnerability\n  when using HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)\n- Fixed a potential ACL bypass, cache-bypass\n  and cross-site scripting attack when processing invalid HTTP\n  Request messages (CVE-2019-12520, CVE-2019-12524, bsc#1170423)\n- Fixed a potential denial of service when\n  processing TLS certificates during HTTPS connections\n  (CVE-2020-14059, bsc#1173304)\n\n- Fixed a potential denial of service associated\n  with incorrect buffer management of HTTP Basic Authentication\n  credentials (bsc#1141329, CVE-2019-12529)\n- Fixed an incorrect buffer management resulting\n  in vulnerability to a denial of service during processing of\n  HTTP Digest Authentication credentials (bsc#1141332, CVE-2019-12525)\n- Fix XSS via user_name or auth parameter\n  in cachemgr.cgi (bsc#1140738, CVE-2019-13345)\n- Fixed a potential code execution vulnerability\n  (CVE-2019-12526, bsc#1156326)\n- Fixed HTTP Request Splitting in HTTP\n  message processing and information disclosure in\n  HTTP Digest Authentication\n  (CVE-2019-18678, CVE-2019-18679, bsc#1156323, bsc#1156324)\n- Fixed a security issue allowing a remote\n  client ability to cause use a buffer overflow when squid is\n  acting as reverse-proxy.\n  (CVE-2020-8449, CVE-2020-8450, bsc#1162687)\n- Fixed a security issue allowing for information\n  disclosure in FTP gateway (CVE-2019-12528, bsc#1162689)\n- Fixed a security issue in ext_lm_group_acl\n  when processing NTLM Authentication credentials.\n  (CVE-2020-8517, bsc#1162691)\n\n- Fixed Cross-Site Request Forgery in\n  HTTP Request processing (CVE-2019-18677, bsc#1156328)\n\n- Disable urn parsing and parsing of\n  unknown schemes (bsc#1156329, CVE-2019-12523, CVE-2019-18676)\n","status":"published","published":"2020-08-24T12:06:51Z","modified":"2025-05-02T04:08:43.365999Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1769-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\nsquid was updated to version 4.12 \n\nSecurity issue fixed: \n\n- CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server \n  during TLS Handshake (bsc#1173304).\n  \nOther issues addressed: \n\n- Reverted to slow search for new SMP shm pages due to a regression \n- Fixed an issue where negative responses were never cached\n- Fixed stall if transaction was overwriting a recently active cache entry\n","status":"published","published":"2020-06-26T06:03:27Z","modified":"2026-02-04T02:22:13.573655Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1770-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\t  \nsquid was updated to version 4.12 \n\nSecurity issue fixed: \n\n- CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server \n  during TLS Handshake (bsc#1173304).\n  \nOther issues addressed: \n\n- Reverted to slow search for new SMP shm pages due to a regression \n- Fixed an issue where negative responses were never cached\n- Fixed stall if transaction was overwriting a recently active cache entry\n","status":"published","published":"2020-06-26T06:03:57Z","modified":"2026-02-04T04:26:55.642018Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1803-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server \n  during TLS Handshake (bsc#1173304).\n- CVE-2019-18860: Fixed handling of invalid domain names in cachemgr.cgi (bsc#1167373).\n","status":"published","published":"2020-06-30T11:53:36Z","modified":"2026-02-04T04:13:14.085485Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}