squid:4 security update

2023-11-2200:00:00

linux.oracle.com

squid

security update

unix

libecap

http digest authentication

http/1.1

icap

request/response smuggling

9.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

0.03 Low

EPSS

Percentile

91.0%

JSON

libecap
squid
[7:4.15-7.1]

Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest
Authentication
Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1
and ICAP

OSVersionArchitecturePackageVersionFilename
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux8srcsquid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90083+f7556140.1.src.rpm
oracle linux8aarch64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux8aarch64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux8aarch64squid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90083+f7556140.1.aarch64.rpm
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux8srcsquid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90083+f7556140.1.src.rpm
oracle linux8x86_64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux8x86_64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux8x86_64squid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90083+f7556140.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux	8	src	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90083+f7556140.1.src.rpm
oracle linux	8	aarch64	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux	8	aarch64	libecap-devel	< 1.0.1-2.module	libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux	8	aarch64	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90083+f7556140.1.aarch64.rpm
oracle linux	8	src	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux	8	src	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90083+f7556140.1.src.rpm
oracle linux	8	x86_64	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux	8	x86_64	libecap-devel	< 1.0.1-2.module	libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux	8	x86_64	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90083+f7556140.1.x86_64.rpm