squid:4 security update

2023-12-1100:00:00

linux.oracle.com

squid

security update

libecap

http

https

dos

digest authentication

request/response smuggling

icap

rhel-14801

rhel-14776

unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

libecap
squid
[7:4.15-7.3]

Fix squid: DoS against HTTP and HTTPS (CVE-2023-5824)
[7:4.15-7.1]
Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest
Authentication
Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1
and ICAP

OSVersionArchitecturePackageVersionFilename
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux8srcsquid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90100+fede0fa7.3.src.rpm
oracle linux8aarch64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux8aarch64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux8aarch64squid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90100+fede0fa7.3.aarch64.rpm
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux8srcsquid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90100+fede0fa7.3.src.rpm
oracle linux8x86_64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux8x86_64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux8x86_64squid< 4.15-7.modulesquid-4.15-7.module+el8.9.0+90100+fede0fa7.3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux	8	src	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90100+fede0fa7.3.src.rpm
oracle linux	8	aarch64	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux	8	aarch64	libecap-devel	< 1.0.1-2.module	libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
oracle linux	8	aarch64	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90100+fede0fa7.3.aarch64.rpm
oracle linux	8	src	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
oracle linux	8	src	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90100+fede0fa7.3.src.rpm
oracle linux	8	x86_64	libecap	< 1.0.1-2.module	libecap-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux	8	x86_64	libecap-devel	< 1.0.1-2.module	libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
oracle linux	8	x86_64	squid	< 4.15-7.module	squid-4.15-7.module+el8.9.0+90100+fede0fa7.3.x86_64.rpm