Skip to content
OpenAdvisories
High RHSA-2024:1832 2 CVEs

Red Hat Security Advisory: squid:4 security update

Published Sep 16, 2024 · Updated Sep 9, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream squid 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream squid 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+21523+3cc98f8b.8

Vulnerabilities 2

  • High 8.6
    CVE-2024-25111 EPSS 65%

    SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

    Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of …

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2024-25617 EPSS 88%

    Denial of Service in HTTP Header parser in squid proxy

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2264309
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2268366
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1832.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-25111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-25111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-25111
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-72c2-c3wm-8qxc
  • article
    https://megamansec.github.io/Squid-Security-Audit/chunked-stackoverflow.html
  • report
    https://access.redhat.com/security/cve/CVE-2024-25617
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-25617
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-25617
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-h5x6-w8mv-xfpr
  • article
    https://megamansec.github.io/Squid-Security-Audit/response-memleaks.html