(RHSA-2024:0046) Important: squid:4 security update

2024-01-0320:53:49

access.redhat.com

squid proxy server

security update

denial of service

ssl certificate validation

null pointer dereference

buffer over-read

helper process management

7.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.7%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lelibecap-debugsource< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHatanyaarch64libecap-devel< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHatanyaarch64squid-debuginfo< 4.15-7.module+el8.9.0+20975+25f17541.5squid-debuginfo-4.15-7.module+el8.9.0+20975+25f17541.5.aarch64.rpm
RedHatanyppc64lelibecap-debuginfo< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debuginfo-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHatanys390xsquid< 4.15-7.module+el8.9.0+20975+25f17541.5squid-4.15-7.module+el8.9.0+20975+25f17541.5.s390x.rpm
RedHatanyx86_64libecap-debugsource< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHatanyppc64lelibecap-devel< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHatanyx86_64libecap< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHatanyx86_64libecap-devel< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHatanyx86_64squid-debugsource< 4.15-7.module+el8.9.0+20975+25f17541.5squid-debugsource-4.15-7.module+el8.9.0+20975+25f17541.5.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	libecap-debugsource	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHat	any	aarch64	libecap-devel	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHat	any	aarch64	squid-debuginfo	< 4.15-7.module+el8.9.0+20975+25f17541.5	squid-debuginfo-4.15-7.module+el8.9.0+20975+25f17541.5.aarch64.rpm
RedHat	any	ppc64le	libecap-debuginfo	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debuginfo-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHat	any	s390x	squid	< 4.15-7.module+el8.9.0+20975+25f17541.5	squid-4.15-7.module+el8.9.0+20975+25f17541.5.s390x.rpm
RedHat	any	x86_64	libecap-debugsource	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHat	any	ppc64le	libecap-devel	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHat	any	x86_64	libecap	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHat	any	x86_64	libecap-devel	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64.rpm
RedHat	any	x86_64	squid-debugsource	< 4.15-7.module+el8.9.0+20975+25f17541.5	squid-debugsource-4.15-7.module+el8.9.0+20975+25f17541.5.x86_64.rpm