(RHSA-2024:1066) Important: squid:4 security update

2024-03-0408:55:06

access.redhat.com

rhsa-2024-1066

security fix

denial of service

http header

parser

cvss score

acknowledgments

references

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

squid: denial of service in HTTP header parser (CVE-2024-25617)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64libecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyx86_64squid-debuginfo< 4.15-3.module+el8.6.0+21376+425c674a.5squid-debuginfo-4.15-3.module+el8.6.0+21376+425c674a.5.x86_64.rpm
RedHatanys390xsquid-debugsource< 4.15-3.module+el8.6.0+21376+425c674a.5squid-debugsource-4.15-3.module+el8.6.0+21376+425c674a.5.s390x.rpm
RedHatanyx86_64squid< 4.15-3.module+el8.6.0+21376+425c674a.5squid-4.15-3.module+el8.6.0+21376+425c674a.5.x86_64.rpm
RedHatanyaarch64squid-debugsource< 4.15-3.module+el8.6.0+21376+425c674a.5squid-debugsource-4.15-3.module+el8.6.0+21376+425c674a.5.aarch64.rpm
RedHatanyppc64lelibecap-debuginfo< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyppc64lelibecap-devel< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyppc64lelibecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyppc64lesquid-debuginfo< 4.15-3.module+el8.6.0+21376+425c674a.5squid-debuginfo-4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le.rpm
RedHatanys390xsquid-debuginfo< 4.15-3.module+el8.6.0+21376+425c674a.5squid-debuginfo-4.15-3.module+el8.6.0+21376+425c674a.5.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	libecap	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHat	any	x86_64	squid-debuginfo	< 4.15-3.module+el8.6.0+21376+425c674a.5	squid-debuginfo-4.15-3.module+el8.6.0+21376+425c674a.5.x86_64.rpm
RedHat	any	s390x	squid-debugsource	< 4.15-3.module+el8.6.0+21376+425c674a.5	squid-debugsource-4.15-3.module+el8.6.0+21376+425c674a.5.s390x.rpm
RedHat	any	x86_64	squid	< 4.15-3.module+el8.6.0+21376+425c674a.5	squid-4.15-3.module+el8.6.0+21376+425c674a.5.x86_64.rpm
RedHat	any	aarch64	squid-debugsource	< 4.15-3.module+el8.6.0+21376+425c674a.5	squid-debugsource-4.15-3.module+el8.6.0+21376+425c674a.5.aarch64.rpm
RedHat	any	ppc64le	libecap-debuginfo	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHat	any	ppc64le	libecap-devel	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHat	any	ppc64le	libecap	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHat	any	ppc64le	squid-debuginfo	< 4.15-3.module+el8.6.0+21376+425c674a.5	squid-debuginfo-4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le.rpm
RedHat	any	s390x	squid-debuginfo	< 4.15-3.module+el8.6.0+21376+425c674a.5	squid-debuginfo-4.15-3.module+el8.6.0+21376+425c674a.5.s390x.rpm