RHSA-2024:1787: Important: squid security update
Important: squid security update
Other sources
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.<br>Security Fix(es):<br><li> squid: denial of service in HTTP header parser (CVE-2024-25617)</li> <li> squid: denial of service in HTTP request parsing (CVE-2023-50269)</li> <li> squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)</li> <li> squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)</li> <li> squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)</li> <li> squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1787?
The severity of RHSA-2024:1787 is classified as important.
What vulnerabilities are addressed in RHSA-2024:1787?
RHSA-2024:1787 addresses a denial of service vulnerability in the HTTP header parser (CVE-2024-25617).
How do I fix RHSA-2024:1787?
To fix RHSA-2024:1787, you need to update the Squid package to version 3.5.20-17.el7_9.10 or later.
Which versions of Squid are affected by RHSA-2024:1787?
Squid versions prior to 3.5.20-17.el7_9.10 are affected by RHSA-2024:1787.
Is RHSA-2024:1787 applicable to all Red Hat Enterprise Linux versions?
RHSA-2024:1787 is specifically applicable to Red Hat Enterprise Linux 7.9 where the affected Squid version is deployed.