Skip to content
OpenAdvisories
High ELSA-2024-9625 1 CVE

Important: squid security update (Oracle Linux 9)

Published Nov 18, 2024 · Updated Nov 18, 2024

Ecosystem: Oracle Linux

Summary

[7:5.5-14.3]
- Disable ESI support
- Resolves: RHEL-65076 - CVE-2024-45802 squid: Denial of Service processing ESI
response content

[7:5.5-14.2]
- Resolves: RHEL-64425 TCP_MISS_ABORTED/100 erros when uploading

[7:5.5-14.1]
- Resolves: RHEL-62332 - (Regression) Transfer-encoding:chunked data is not sent
to the client in its complementary

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 squid 7:5.5-14.el9_5.3

Vulnerabilities 1

  • High 7.5
    CVE-2024-45802 EPSS 46%

    Squid Denial of Service

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Den…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux