Go to file
Catalin Enache 7166a2daec squid: CVE-2016-4553
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10
does not properly ignore the Host header when absolute-URI
is provided, which allows remote attackers to conduct
cache-poisoning attacks via an HTTP request.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4553

Backported upstream patch:
http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch

Signed-off-by: Catalin Enache <catalin.enache@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit d46c89ae44)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16 10:29:39 -07:00
contrib contrib: print oldline within single quotes 2016-01-04 14:56:24 +01:00
meta-efl meta-efl: use bb.utils.contains() instead of base_contains() 2016-05-02 14:03:03 -07:00
meta-filesystems Add simple-mtpfs recipe 2016-05-02 14:03:03 -07:00
meta-gnome libwnck: fix WARNING 2016-05-13 23:03:12 -07:00
meta-gpe README: update maintainers list for krogoth 2016-04-12 11:50:37 +02:00
meta-initramfs initramfs-kexecboot-klibc-image: Skip for nios2 2016-08-16 10:29:39 -07:00
meta-multimedia fluidsynth: set correct portaudio packageconfig dependency 2016-05-09 19:05:03 -07:00
meta-networking squid: CVE-2016-4553 2016-08-16 10:29:39 -07:00
meta-oe openct: Fix rootfs creation errors 2016-08-16 10:29:39 -07:00
meta-perl libhtml-parser-perl: update to 3.72 2016-05-02 14:03:01 -07:00
meta-python pytest: fix runtime issues. 2016-08-16 10:29:38 -07:00
meta-ruby README: update maintainers list for krogoth 2016-04-12 11:50:37 +02:00
meta-systemd README: update maintainers list for krogoth 2016-04-12 11:50:37 +02:00
meta-webserver apache2: fix libtool's path in apxs 2016-08-16 10:29:38 -07:00
meta-xfce xfce-polkit: fix warning not able to copy license 2016-05-09 19:05:03 -07:00
.gitignore gitignore: Ignore Edit backup files, patches, .rej, .orig, .swp 2013-11-24 15:19:27 +01:00
COPYING.MIT add README and license for this layer 2011-02-13 16:47:32 +01:00
README README: add top level readme, update meta-oe one 2011-10-17 09:27:01 +02:00

Collection of layers for the OE-core universe

Please see the respective READMEs in the layer subdirectories