Skip to content
OpenAdvisories
High RHSA-2024:9815 1 CVE

Red Hat Security Advisory: squid:4 security update

Published Nov 25, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream squid 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 E4S rhel_e4s:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream squid 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat · RHEL 8.4 TUS rhel_tus:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+22483+0c92772a.9

Vulnerabilities 1

  • High 7.5
    CVE-2024-45802 EPSS 46%

    Squid Denial of Service

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Den…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2322154
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9815.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-45802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-45802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-45802
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj