[squid-users] Does GREASE bug affect squid 4.10 too?

[Amos Jeffries]

On 1/09/20 1:18 am, Amish wrote:
> Hello,
> 
> Recently there has been reports of GREASE bug wrt Google chrome and Squid.
> 
...>
> So can someone please confirm if bug can affect squid version 4.10 or
> not? And if I upgrade to squid 4.13 will it definitely solve the GREASE
> issue.

4.13 will definitely solve the GREASE issue. I cannot confirm whether
that is affecting 4.10 or older since those versions pass the values to
libssl for interpretation - which may or may not have handled GREASE.

You need to upgrade regardless of whether this solves the issue. The CVE
issues fixed in that release are critical.

If the issues continue or you discover anything more specific about it
please let us know. :)


> 
> Or can it be that Google chrome has again come up with something new
> which is breaking SSL again?
> 

That is entirely possible as well.

HTH
Amos