Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libecap | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libecap-debuginfo | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libecap-debugsource | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | libecap-devel | 0:1.0.1-2.module+el8.1.0+4044+36416a77 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | squid | 7:4.11-3.module+el8.3.0+7851+7808b5f9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | squid-debuginfo | 7:4.11-3.module+el8.3.0+7851+7808b5f9 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | squid-debugsource | 7:4.11-3.module+el8.3.0+7851+7808b5f9 |
Vulnerabilities 18
-
Critical 9.9
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggl…
-
High 8.6
Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CP…
-
Unscored —
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can s…
-
Unscored —
An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESICo…
-
Unscored —
An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HT…
-
Unscored —
An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the r…
-
Unscored —CVE-2019-12526 EPSS 20%
An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. …
-
Unscored —CVE-2019-12528 EPSS 10%
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informa…
-
Unscored —
An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is config…
-
Unscored —CVE-2019-12854 EPSS 12%
Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with …
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buff…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended c…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend…
-
Unscored —CVE-2019-18679 EPSS 43%
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to i…
-
Unscored —
Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.…
-
Unscored —
An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squi…
-
Unscored —
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests…
-
Unscored —CVE-2020-8450 EPSS 72%
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ov…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1730523
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1730528
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1770349
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1770356
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1770360
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1770365
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1770371
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1770375
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1798534
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1798540
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1798552
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1817121
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1827558
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1827562
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1827570
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1852550
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1852554
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1871705
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4743.json
-
report
https://access.redhat.com/security/cve/CVE-2019-12520
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12520
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12520
-
article
http://www.squid-cache.org/Advisories/SQUID-2019_4.txt
-
report
https://access.redhat.com/security/cve/CVE-2019-12521
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12521
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12521
-
article
http://www.squid-cache.org/Advisories/SQUID-2019_12.txt
-
report
https://access.redhat.com/security/cve/CVE-2019-12523
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12523
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12523
-
article
http://www.squid-cache.org/Advisories/SQUID-2019_8.txt
-
report
https://access.redhat.com/security/cve/CVE-2019-12524
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12524
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12524
-
report
https://access.redhat.com/security/cve/CVE-2019-12526
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12526
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12526