Skip to content
OpenAdvisories
High ALAS2-2023-2066 1 CVE

Important: squid security update (Amazon Linux 2)

Published May 25, 2023 · Updated Jun 1, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-10003: Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in Collapsed Forwarding feature mistakenly identifying some private responses as being suitable for delivery to multiple clients.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 squid 7:3.5.20-17.amzn2.7.6
Amazon Linux · 2 squid-debuginfo 7:3.5.20-17.amzn2.7.6
Amazon Linux · 2 squid-migration-script 7:3.5.20-17.amzn2.7.6
Amazon Linux · 2 squid-sysvinit 7:3.5.20-17.amzn2.7.6

Vulnerabilities 1

  • Unscored —
    CVE-2016-10003

    Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results i…

    squid3 squid Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2016-10003.html