Lucene search

K
oraclelinuxOracleLinuxELSA-2020-3623
HistorySep 04, 2020 - 12:00 a.m.

squid:4 security update

2020-09-0400:00:00
linux.oracle.com
23

0.162 Low

EPSS

Percentile

96.0%

libecap
squid
[7:4.4-8.2]

  • Resolves: #1872345 - CVE-2020-15811 squid:4/squid: HTTP Request Splitting
    could result in cache poisoning
  • Resolves: #1872330 - CVE-2020-15810 squid:4/squid: HTTP Request Smuggling
    could result in cache poisoning
    [7:4.4-8.1]
  • Resolves: #1828368 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  • Resolves: #1828367 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  • Resolves: #1829402 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption