High ELSA-2021-1135 1 CVE

Important: squid security update (Oracle Linux 7)

Published Apr 9, 2021 · Updated Apr 9, 2021

Ecosystem: Oracle Linux

Summary

[7:3.5.20-17.6]
- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
a trusted client to perform HTTP Request Smuggling

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	squid	7:3.5.20-17.el7_9.6
Oracle Linux · 7	squid-migration-script	7:3.5.20-17.el7_9.6
Oracle Linux · 7	squid-sysvinit	7:3.5.20-17.el7_9.6

Vulnerabilities 1

Unscored —

CVE-2020-25097

An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trus…

squid squid3 squid squid Debian Ubuntu Alpine

Mar 19, 2021