Summary
libecap
[1.0.1-2]
- Resolves: #1696354 - Ensure modular RPM upgrade path
squid
[7:4.4-5]
- Resolves: #1744672 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
in HttpHeader::getAuth
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libecap | 0:1.0.1-2.module+el8.0.0+5324+ea04b9c2 |
| Oracle Linux · 8 | libecap-devel | 0:1.0.1-2.module+el8.0.0+5324+ea04b9c2 |
| Oracle Linux · 8 | squid | 7:4.4-5.module+el8.0.0+5324+ea04b9c2 |
Vulnerabilities 1
-
Unscored —CVE-2019-12527 EPSS 50%
An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid…