Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 13 Oct 2023 14:54:02 +1300
From: Amos Jeffries <>
To:, Joshua Rogers <>
Subject: Re: Squid Caching Proxy Security Audit: 55
 Vulnerabilities, 35 0days.

Some reference updates.

On 11/10/23 20:55, Joshua Rogers wrote:
> The issues are listed below. Due to the sheer size of issues discovered,
> technical details are not included in this email. However, breakdowns of
> the code and proof-of-concepts can be found on GitHub:

> Cache Poisoning by Large Stored Response Headers (With Bonus XSS)

  ... GHSA-543m-w2m2-g255

> Gopher Assertion Crash

  ... GHSA-f5cp-6rh3-284w

> Assertion in Gopher Response Handling

  ... CVE-2021-46784 / GHSA-f5cp-6rh3-284w


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.