Skip to content
OpenAdvisories
High ELSA-2024-9738 1 CVE

Important: squid security update (Oracle Linux 7)

Published Nov 20, 2024 · Updated Nov 20, 2024

Ecosystem: Oracle Linux

Summary

[7:3.5.20-17.0.3]
- Disable ESI support [CVE-2024-45802][Orabug: 37289058]

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 squid 7:3.5.20-17.0.3.el7_9.10
Oracle Linux · 7 squid-migration-script 7:3.5.20-17.0.3.el7_9.10
Oracle Linux · 7 squid-sysvinit 7:3.5.20-17.0.3.el7_9.10

Vulnerabilities 1

  • High 7.5
    CVE-2024-45802 EPSS 46%

    Squid Denial of Service

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Den…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux