-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2015:230
http://www.mandriva.com/en/support/security/
_______________________________________________________________________
Package : squid
Date : May 6, 2015
Affected: Business Server 2.0
_______________________________________________________________________
Problem Description:
Updated squid packages fix security vulnerability:
Squid configured with client-first SSL-bump does not correctly validate
X509 server certificate domain / hostname fields (CVE-2015-3455).
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3455
http://advisories.mageia.org/MGASA-2015-0191.html
_______________________________________________________________________
Updated Packages:
Mandriva Business Server 2/X86_64:
1b42519307a1a965