Lucene search
OracleLinuxELSA-2023-16656HistoryFeb 15, 2023 - 12:00 a.m.
squid security update
2023-02-1500:00:00
linux.oracle.com
49
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
77.2%
[7:4.15-3.0.3.1]
- Add libtool-ltdl to squid Requires: [Orabug: 34992040]
[ - 7:4.15-3.0.1.1] - Obsolete squid-sysvinit [Jira: OLDIS-20090]
[7:4.15-3.1] - Resolves: #2100782 - CVE-2021-46784 squid:4/squid: DoS when processing gopher
server responses
[7:4.15-3] - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
protocol data may lead to information disclosure
[7:4.15-2] - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
and as a result is not able to download zip file.CODE 404 TO CLIENT)
[7:4.15-1] - new version 4.15
- Resolves: #1964384 - squid:4 rebase to 4.15
[7:4.11-5] - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
may allow a trusted client to perform HTTP Request Smuggling
[7:4.11-4] - Resolves: #1890606 - Fix for CVE 2019-13345 breaks authentication in
cachemgr.cgi
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | squid | < 4.15-3.0.1.el7.1 | squid-4.15-3.0.1.el7.1.src.rpm |
| oracle linux | 7 | aarch64 | squid | < 4.15-3.0.1.el7.1 | squid-4.15-3.0.1.el7.1.aarch64.rpm |
| oracle linux | 7 | src | squid | < 4.15-3.0.3.el7_9.1 | squid-4.15-3.0.3.el7_9.1.src.rpm |
| oracle linux | 7 | x86_64 | squid | < 4.15-3.0.3.el7_9.1 | squid-4.15-3.0.3.el7_9.1.x86_64.rpm |
Related
nessus
nessus
CentOS 7 : squid (CESA-2022:5542)
2022-08-02 00:00:00
Oracle Linux 8 : squid:4 (ELSA-2022-5526)
2022-07-08 00:00:00
Amazon Linux 2 : squid (ALASSQUID4-2023-003)
2023-09-27 00:00:00
redhatcve
redhatcve
CVE-2021-46784
2022-06-24 06:05:32
redhat
redhat
(RHSA-2022:5530) Important: squid:4 security update
2022-07-07 10:39:45
(RHSA-2022:5528) Important: squid:4 security update
2022-07-07 10:39:36
(RHSA-2022:5526) Important: squid:4 security update
2022-07-07 10:38:38
debiancve
debiancve
CVE-2021-46784
2022-07-17 22:15:00
veracode
veracode
Denial Of Service (DoS)
2022-06-23 19:20:43
oraclelinux
oraclelinux
squid:4 security update
2022-07-08 00:00:00
squid security update
2022-07-12 00:00:00
squid security update
2022-07-07 00:00:00
rocky
rocky
squid:4 security update
2022-07-07 10:38:38
suse
suse
Security update for squid (important)
2022-07-12 00:00:00
Security update for squid (important)
2022-07-26 00:00:00
osv
osv
CVE-2021-46784
2022-07-17 22:15:08
squid, squid3 vulnerability
2022-06-22 14:03:19
Important: squid security update
2022-07-07 00:00:00
cve
cve
CVE-2021-46784
2022-07-17 22:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-5491-1)
2022-06-23 00:00:00
Fedora: Security Advisory for squid (FEDORA-2022-0fa51087e7)
2022-07-07 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2022-2481)
2022-10-10 00:00:00
mageia
mageia
Updated squid packages fix security vulnerability
2022-07-05 22:11:26
ubuntu
ubuntu
Squid vulnerability
2022-06-22 00:00:00
prion
prion
Input validation
2022-07-17 22:15:00
redos
redos
ROS-20220628-03
2022-06-28 00:00:00
almalinux
almalinux
Important: squid security update
2022-07-07 00:00:00
Important: squid:4 security update
2022-07-07 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: squid-5.6-1.fc36
2022-07-06 01:38:17
[SECURITY] Fedora 35 Update: squid-5.6-1.fc35
2022-07-06 01:54:18
ubuntucve
ubuntucve
CVE-2021-46784
2021-12-31 00:00:00
centos
centos
squid security update
2022-08-02 19:14:45
debian
debian
[SECURITY] [DSA 5171-1] squid security update
2022-06-27 18:45:27
amazon
amazon
Important: squid
2023-01-18 00:16:00
Important: squid
2023-01-31 20:44:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0224
2022-08-06 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0224
2022-08-06 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0433
2022-08-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2273
2023-10-22 06:19:50
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
77.2%
Related for ELSA-2023-16656