(RHSA-2023:6810) Critical: squid:4 security update

2023-11-0810:44:35

access.redhat.com

squid proxy server

http digest authentication

request smuggling

icap

cvss score

7.3 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)
squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64libecap-debugsource< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyx86_64libecap-devel< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyx86_64squid-debugsource< 4.4-8.module+el8.1.0+20589+bb91f53c.6squid-debugsource-4.4-8.module+el8.1.0+20589+bb91f53c.6.x86_64.rpm
RedHatanyx86_64libecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyppc64lelibecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyppc64lelibecap-devel< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyx86_64squid< 4.4-8.module+el8.1.0+20589+bb91f53c.6squid-4.4-8.module+el8.1.0+20589+bb91f53c.6.x86_64.rpm
RedHatanyppc64lesquid< 4.4-8.module+el8.1.0+20589+bb91f53c.6squid-4.4-8.module+el8.1.0+20589+bb91f53c.6.ppc64le.rpm
RedHatanyppc64lelibecap-debugsource< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyppc64lesquid-debugsource< 4.4-8.module+el8.1.0+20589+bb91f53c.6squid-debugsource-4.4-8.module+el8.1.0+20589+bb91f53c.6.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	libecap-debugsource	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHat	any	x86_64	libecap-devel	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHat	any	x86_64	squid-debugsource	< 4.4-8.module+el8.1.0+20589+bb91f53c.6	squid-debugsource-4.4-8.module+el8.1.0+20589+bb91f53c.6.x86_64.rpm
RedHat	any	x86_64	libecap	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHat	any	ppc64le	libecap	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHat	any	ppc64le	libecap-devel	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHat	any	x86_64	squid	< 4.4-8.module+el8.1.0+20589+bb91f53c.6	squid-4.4-8.module+el8.1.0+20589+bb91f53c.6.x86_64.rpm
RedHat	any	ppc64le	squid	< 4.4-8.module+el8.1.0+20589+bb91f53c.6	squid-4.4-8.module+el8.1.0+20589+bb91f53c.6.ppc64le.rpm
RedHat	any	ppc64le	libecap-debugsource	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHat	any	ppc64le	squid-debugsource	< 4.4-8.module+el8.1.0+20589+bb91f53c.6	squid-debugsource-4.4-8.module+el8.1.0+20589+bb91f53c.6.ppc64le.rpm