Summary
libecap
squid
[7:4.15-7.3]
- Fix squid: DoS against HTTP and HTTPS (CVE-2023-5824)
[7:4.15-7.1]
- Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest
Authentication
- Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1
and ICAP
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libecap | 0:1.0.1-2.module+el8.9.0+90083+f7556140 |
| Oracle Linux · 8 | libecap-devel | 0:1.0.1-2.module+el8.9.0+90083+f7556140 |
| Oracle Linux · 8 | squid | 7:4.15-7.module+el8.9.0+90100+fede0fa7.3 |
Vulnerabilities 1
-
High 7.5
Squid: dos against http and https
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a l…