RHSA-2024:0772: Important: squid:4 security update
Important: squid:4 security update
Other sources
Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.<br>Security Fix(es):<br><li> squid: DoS against HTTP and HTTPS (CVE-2023-5824)</li> <li> squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)</li> <li> squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)</li> <li> squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)</li> <li> squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)</li> <li> squid: denial of service in HTTP request parsing (CVE-2023-50269)</li> Bug Fix(es):<br><li> squid crashes in assertion when a parent peer exists (RHEL-18253)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:0772?
The severity of RHSA-2024:0772 is classified as Important.
How do I fix RHSA-2024:0772?
To fix RHSA-2024:0772, update the affected packages to the recommended versions provided by Red Hat.
What vulnerabilities are addressed in RHSA-2024:0772?
RHSA-2024:0772 addresses vulnerabilities related to denial of service attacks against HTTP and HTTPS via CVE-2023-5824 and SSL certificate validation issues.
Which software packages are affected by RHSA-2024:0772?
The affected software packages include squid and libecap on various Red Hat Enterprise Linux versions.
When was RHSA-2024:0772 released?
RHSA-2024:0772 was released as a security update for Red Hat Enterprise Linux.