Summary
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* squid: out-of-bounds read in WCCP protocol data may lead to information disclosure (CVE-2021-28116)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libecap | 0:1.0.1-2.module+el8.4.0+404+316a0dc5 |
| Rocky Linux · 8 | squid | 7:4.15-3.module+el8.6.0+1044+67ab5d0a.2 |
Vulnerabilities 1
-
Low 3.7CVE-2021-28116 EPSS 13%
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bo…