{"id":"CLSA-2021-1634925600","summary":"Fixed CVEs in squid: CVE-2020-15049, CVE-2020-14058","details":"- CVE-2020-14058: fix handling of unknown SSL errors which resulted in denial of\n  service\n- CVE-2020-15049: fix incorrect validation of Content-Length field leading to\n  Http smuggling and Poisoning attack","modified":"2026-05-27T11:34:01.523594854Z","published":"2021-10-22T18:00:00Z","upstream":["CVE-2020-14058","CVE-2020-15049"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ol6/CLSA-2021-1634925600.html"}],"affected":[{"package":{"name":"squid","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/squid?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.cloudlinux.els"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2021-1634925600.json"}}],"schema_version":"1.7.5"}