Skip to content
OpenAdvisories
High RLSA-2024:9625 1 CVE

Important: squid security update

Published Mar 17, 2025 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 squid 7:5.5-14.el9_5.3

Vulnerabilities 1

  • High 7.5
    CVE-2024-45802 EPSS 46%

    Squid Denial of Service

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Den…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2322154