squid:4 security update

2021-05-2600:00:00

linux.oracle.com

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

squid
[7:4.11-4.2]

Resolves: #1944260 - CVE-2020-25097 squid:4/squid: improper input validation
may allow a trusted client to perform HTTP Request Smuggling

OSVersionArchitecturePackageVersionFilename
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm
oracle linux8srcsquid< 4.11-4.modulesquid-4.11-4.module+el8.4.0+20173+36853f3f.2.src.rpm
oracle linux8aarch64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm
oracle linux8aarch64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm
oracle linux8aarch64squid< 4.11-4.modulesquid-4.11-4.module+el8.4.0+20173+36853f3f.2.aarch64.rpm
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm
oracle linux8srcsquid< 4.11-4.modulesquid-4.11-4.module+el8.4.0+20173+36853f3f.2.src.rpm
oracle linux8x86_64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm
oracle linux8x86_64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm
oracle linux8x86_64squid< 4.11-4.modulesquid-4.11-4.module+el8.4.0+20173+36853f3f.2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm
oracle linux	8	src	squid	< 4.11-4.module	squid-4.11-4.module+el8.4.0+20173+36853f3f.2.src.rpm
oracle linux	8	aarch64	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm
oracle linux	8	aarch64	libecap-devel	< 1.0.1-2.module	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm
oracle linux	8	aarch64	squid	< 4.11-4.module	squid-4.11-4.module+el8.4.0+20173+36853f3f.2.aarch64.rpm
oracle linux	8	src	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm
oracle linux	8	src	squid	< 4.11-4.module	squid-4.11-4.module+el8.4.0+20173+36853f3f.2.src.rpm
oracle linux	8	x86_64	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm
oracle linux	8	x86_64	libecap-devel	< 1.0.1-2.module	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm
oracle linux	8	x86_64	squid	< 4.11-4.module	squid-4.11-4.module+el8.4.0+20173+36853f3f.2.x86_64.rpm