ELSA-2021-9465

ELSA-2021-9465 - squid security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-09-24

Description

[7:3.5.20-17.0.1]
- Mutiple CVE fixes for squid [Orabug: 33146289]
- Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778)
- Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788)
- Resolves: CVE-2021-31806,31807,31808 squid: Handle more Range requests (#790)
- Resolves: CVE-2021-33620 squid: Handle more partial responses (#791)

Related CVEs

CVE-2021-28651

CVE-2021-33620

CVE-2021-31806

CVE-2021-31807

CVE-2021-28652

CVE-2021-31808

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	squid-3.5.20-17.0.1.el7_9.6.src.rpm	dcba9ce6159290b826a6481bf469989c439a4fffa736b294dfe6abd1d76a39c4	ELSA-2022-22254	ol7_aarch64_latest
	squid-3.5.20-17.0.1.el7_9.6.src.rpm	dcba9ce6159290b826a6481bf469989c439a4fffa736b294dfe6abd1d76a39c4	ELSA-2022-22254	ol7_aarch64_optional_latest
	squid-3.5.20-17.0.1.el7_9.6.src.rpm	dcba9ce6159290b826a6481bf469989c439a4fffa736b294dfe6abd1d76a39c4	ELSA-2022-22254	ol7_aarch64_u9_patch
	squid-3.5.20-17.0.1.el7_9.6.aarch64.rpm	966cf8a41b781ad4c08aba0f499081bd9df4458f654d8a6b5b44d934f1daeb22	ELSA-2022-22254	ol7_aarch64_latest
	squid-3.5.20-17.0.1.el7_9.6.aarch64.rpm	966cf8a41b781ad4c08aba0f499081bd9df4458f654d8a6b5b44d934f1daeb22	ELSA-2022-22254	ol7_aarch64_u9_patch
	squid-migration-script-3.5.20-17.0.1.el7_9.6.aarch64.rpm	359566be77175f4190ed5344db1afc3e7bbe5fab2b4112a08f8fd846391616db	ELSA-2024-11049	ol7_aarch64_latest
	squid-migration-script-3.5.20-17.0.1.el7_9.6.aarch64.rpm	359566be77175f4190ed5344db1afc3e7bbe5fab2b4112a08f8fd846391616db	ELSA-2024-11049	ol7_aarch64_u9_patch
	squid-sysvinit-3.5.20-17.0.1.el7_9.6.aarch64.rpm	6c3eb837a1c6e12233438b3135b41e846c988b0e7ffcbfdaacbeb4971e8d04d1	ELSA-2024-11049	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	squid-3.5.20-17.0.1.el7_9.6.src.rpm	dcba9ce6159290b826a6481bf469989c439a4fffa736b294dfe6abd1d76a39c4	ELSA-2022-22254	ol7_x86_64_latest
	squid-3.5.20-17.0.1.el7_9.6.src.rpm	dcba9ce6159290b826a6481bf469989c439a4fffa736b294dfe6abd1d76a39c4	ELSA-2022-22254	ol7_x86_64_optional_latest
	squid-3.5.20-17.0.1.el7_9.6.src.rpm	dcba9ce6159290b826a6481bf469989c439a4fffa736b294dfe6abd1d76a39c4	ELSA-2022-22254	ol7_x86_64_u9_patch
	squid-3.5.20-17.0.1.el7_9.6.x86_64.rpm	ca5a0569649604fc25104288773ba468c52a58c250b7cfcedfd530fe71c30e6f	ELSA-2022-22254	ol7_x86_64_latest
	squid-3.5.20-17.0.1.el7_9.6.x86_64.rpm	ca5a0569649604fc25104288773ba468c52a58c250b7cfcedfd530fe71c30e6f	ELSA-2022-22254	ol7_x86_64_u9_patch
	squid-migration-script-3.5.20-17.0.1.el7_9.6.x86_64.rpm	3c549ce517f2d522e58071d71db95fda1f044d14a3f6fe82d29a9614dd3c6eeb	ELSA-2024-11049	ol7_x86_64_latest
	squid-migration-script-3.5.20-17.0.1.el7_9.6.x86_64.rpm	3c549ce517f2d522e58071d71db95fda1f044d14a3f6fe82d29a9614dd3c6eeb	ELSA-2024-11049	ol7_x86_64_u9_patch
	squid-sysvinit-3.5.20-17.0.1.el7_9.6.x86_64.rpm	61bf22e82d9582ee01b8a9b1cf3a6d9a65fdcef4edaac6b8bb1b4f65efadb817	ELSA-2024-11049	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team