Mandriva Linux Security Advisory 2015-230 – Squid configured with client-first SSL-bump does not correctly validate X509 server certificate domain / hostname fields.