CVE-2021-41611

The squid proxy package may incorrectly classify certain certificates as trusted. This can allow traffic to obtain security trust when the trust is not valid. The highest threat from this vulnerability is to confidentiality and integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

The only mitigation is complete denial to TLS and HTTPS servers publishing affected certificate chains. The set of affected servers varies over time.

acl vulnerableDomains dstdomain .example.net http_access deny vulnerableDomains