Skip to content
OpenAdvisories
Unscored RHSA-2005:766 3 CVEs

Red Hat Security Advisory: squid security update

Published Sep 17, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as squid 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::as squid-debuginfo 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::desktop squid 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::desktop squid-debuginfo 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::es squid 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::es squid-debuginfo 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::ws squid 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 3 enterprise_linux:3::ws squid-debuginfo 7:2.5.STABLE3-6.3E.14
Red Hat · RHEL 4 enterprise_linux:4::as squid 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::as squid-debuginfo 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::desktop squid 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::desktop squid-debuginfo 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::es squid 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::es squid-debuginfo 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::ws squid 7:2.5.STABLE6-3.4E.11
Red Hat · RHEL 4 enterprise_linux:4::ws squid-debuginfo 7:2.5.STABLE6-3.4E.11

Vulnerabilities 3

  • Unscored —
    CVE-2004-2479

    Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid host…

    squid Debian
  • Unscored —
    CVE-2005-2794

    store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain abor…

    squid Debian
  • Unscored —
    CVE-2005-2796

    The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of…

    squid Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://www.squid-cache.org/bugs/show_bug.cgi?id=1143
  • article
    http://www.squid-cache.org/bugs/show_bug.cgi?id=1368
  • article
    http://www.squid-cache.org/bugs/show_bug.cgi?id=1325
  • article
    http://www.squid-cache.org/bugs/show_bug.cgi?id=1355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=166520
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=167413
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_766.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-2479
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617425
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-2479
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-2479
  • report
    https://access.redhat.com/security/cve/CVE-2005-2794
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617754
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2794
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2794
  • report
    https://access.redhat.com/security/cve/CVE-2005-2796
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617755
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2796
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2796