ELSA-2021-1135

ELSA-2021-1135 - squid security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-04-09

Description

[7:3.5.20-17.6]
- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
a trusted client to perform HTTP Request Smuggling

Related CVEs

CVE-2020-25097

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	squid-3.5.20-17.el7_9.6.src.rpm	4c57327fcbd23b5546aa38cb1da7978e43e1415eecc9c654cbc1b0d92b3c173b	ELSA-2022-22254	ol7_aarch64_latest
	squid-3.5.20-17.el7_9.6.src.rpm	4c57327fcbd23b5546aa38cb1da7978e43e1415eecc9c654cbc1b0d92b3c173b	ELSA-2022-22254	ol7_aarch64_optional_latest
	squid-3.5.20-17.el7_9.6.src.rpm	4c57327fcbd23b5546aa38cb1da7978e43e1415eecc9c654cbc1b0d92b3c173b	ELSA-2022-22254	ol7_aarch64_u9_patch
	squid-3.5.20-17.el7_9.6.aarch64.rpm	96a42855728500b276a935903444d8ae9db6e448ffda4f96b8ffb0b2a6503af5	ELSA-2022-22254	ol7_aarch64_latest
	squid-3.5.20-17.el7_9.6.aarch64.rpm	96a42855728500b276a935903444d8ae9db6e448ffda4f96b8ffb0b2a6503af5	ELSA-2022-22254	ol7_aarch64_u9_patch
	squid-migration-script-3.5.20-17.el7_9.6.aarch64.rpm	ed75d87d25ab599f158f403db6a2958288017a1e56d04d21587d7cbcc23c7402	ELSA-2024-11049	ol7_aarch64_latest
	squid-migration-script-3.5.20-17.el7_9.6.aarch64.rpm	ed75d87d25ab599f158f403db6a2958288017a1e56d04d21587d7cbcc23c7402	ELSA-2024-11049	ol7_aarch64_u9_patch
	squid-sysvinit-3.5.20-17.el7_9.6.aarch64.rpm	82634d8a21925e60e37f9cae70ed2c9ebf5331d40d3ba885bfc355b0ab2f1ab1	ELSA-2024-11049	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	squid-3.5.20-17.el7_9.6.src.rpm	4c57327fcbd23b5546aa38cb1da7978e43e1415eecc9c654cbc1b0d92b3c173b	ELSA-2022-22254	ol7_x86_64_latest
	squid-3.5.20-17.el7_9.6.src.rpm	4c57327fcbd23b5546aa38cb1da7978e43e1415eecc9c654cbc1b0d92b3c173b	ELSA-2022-22254	ol7_x86_64_optional_latest
	squid-3.5.20-17.el7_9.6.src.rpm	4c57327fcbd23b5546aa38cb1da7978e43e1415eecc9c654cbc1b0d92b3c173b	ELSA-2022-22254	ol7_x86_64_u9_patch
	squid-3.5.20-17.el7_9.6.x86_64.rpm	f952effaa804d06b8b8f19ce943cc82f9259d0e656a397aa71b504ba3aa380c5	ELSA-2022-22254	ol7_x86_64_latest
	squid-3.5.20-17.el7_9.6.x86_64.rpm	f952effaa804d06b8b8f19ce943cc82f9259d0e656a397aa71b504ba3aa380c5	ELSA-2022-22254	ol7_x86_64_u9_patch
	squid-migration-script-3.5.20-17.el7_9.6.x86_64.rpm	ea022ee3cd3b075129d66026b793d9d97d7f777f189a0a21a42c5928890d3261	ELSA-2024-11049	ol7_x86_64_latest
	squid-migration-script-3.5.20-17.el7_9.6.x86_64.rpm	ea022ee3cd3b075129d66026b793d9d97d7f777f189a0a21a42c5928890d3261	ELSA-2024-11049	ol7_x86_64_u9_patch
	squid-sysvinit-3.5.20-17.el7_9.6.x86_64.rpm	c7608a48c1d46d516c4856a0e72eefda0d6c5a63a7571d1f62e56849ddb9157e	ELSA-2024-11049	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team