ELSA-2022-1939

ELSA-2022-1939 - squid:4 security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2022-05-17

Description

libecap
squid
[7:4.15-3]
- Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
protocol data may lead to information disclosure

[7:4.15-2]
- Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
and as a result is not able to download zip file.CODE 404 TO CLIENT)

Related CVEs

CVE-2021-28116

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm	0195182be012daf0cdc36e287b86bdec	-
	squid-4.15-3.module+el8.6.0+20529+9782b8ab.src.rpm	b534778f8c8d0af18e5b81edbe1fbf9c	-
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm	4cde081ed8fa9696912186479dd3d3cb	-
	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm	6b2b3ee272233609c97c2710fdba8bb4	-
	squid-4.15-3.module+el8.6.0+20529+9782b8ab.aarch64.rpm	7d00d4a526a023bacb0c7ac6489eb674	-
Oracle Linux 8 (x86_64)	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm	0195182be012daf0cdc36e287b86bdec	-
	squid-4.15-3.module+el8.6.0+20529+9782b8ab.src.rpm	b534778f8c8d0af18e5b81edbe1fbf9c	-
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm	d7694a48728f3ceb265f8bd4adef8312	-
	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm	f0cf677f00c0d9f12089edc168d3034d	-
	squid-4.15-3.module+el8.6.0+20529+9782b8ab.x86_64.rpm	6ea92ee9c4f88abda5836c5ba1ee3370	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team