Skip to content
OpenAdvisories
High RHSA-2024:1085 1 CVE

Red Hat Security Advisory: squid security update

Published Sep 16, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream squid 7:5.5-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream squid-debuginfo 7:5.5-5.el9_2.4
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream squid-debugsource 7:5.5-5.el9_2.4

Vulnerabilities 1

  • High 8.6
    CVE-2023-50269 EPSS 58%

    SQUID-2023:10 Denial of Service in HTTP Request parsing

    Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This …

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254663
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1085.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-50269
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-50269
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-50269
  • article
    http://www.squid-cache.org/Versions/v5/SQUID-2023_10.patch
  • article
    http://www.squid-cache.org/Versions/v6/SQUID-2023_10.patch
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3