ELSA-2023-6267

ELSA-2023-6267 - squid:4 security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2023-11-07

Description

libecap
squid
[4.15-6.0.1]
- Improve HTTP chunked encoding compliance (CVE-2023-46846)
- Fix stack buffer overflow when parsing Digest Authorization (CVE-2023-46847)

Related CVEs

CVE-2023-46847

CVE-2023-46846

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm	26488addfb75f0c396bc9b4245d5e6c94bb5952dcdbdc84914b7f420bde9176c	-	ol8_aarch64_appstream
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm	26488addfb75f0c396bc9b4245d5e6c94bb5952dcdbdc84914b7f420bde9176c	-	ol8_aarch64_appstream_developer
	squid-4.15-6.0.1.module+el8.8.0+90059+985ac402.src.rpm	7c933f690a3cd9b2ce5b3333398ebcdc4be0d3d76eedec77f66c782436db9fb6	-	ol8_aarch64_appstream
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm	4d2c9c1308353544ed9f364ee5f626456bad8e582c10f4f28fb074e5b940d1cc	-	ol8_aarch64_appstream
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm	4d2c9c1308353544ed9f364ee5f626456bad8e582c10f4f28fb074e5b940d1cc	-	ol8_aarch64_appstream_developer
	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm	eb7b08301f67aa063880df66d27f13b263a8a3256aa4aa34549216c805a3caa7	-	ol8_aarch64_appstream
	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.aarch64.rpm	eb7b08301f67aa063880df66d27f13b263a8a3256aa4aa34549216c805a3caa7	-	ol8_aarch64_appstream_developer
	squid-4.15-6.0.1.module+el8.8.0+90059+985ac402.aarch64.rpm	353862c92ae92d6a276f645a43a3b3ae8df5a72da30d12384af205d546fac5ec	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm	26488addfb75f0c396bc9b4245d5e6c94bb5952dcdbdc84914b7f420bde9176c	-	ol8_x86_64_appstream
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.src.rpm	26488addfb75f0c396bc9b4245d5e6c94bb5952dcdbdc84914b7f420bde9176c	-	ol8_x86_64_appstream_developer
	squid-4.15-6.0.1.module+el8.8.0+90059+985ac402.src.rpm	7c933f690a3cd9b2ce5b3333398ebcdc4be0d3d76eedec77f66c782436db9fb6	-	ol8_x86_64_appstream
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm	7ce5f67fdad91140179d1e1778fb3123534f78fbb97ba36ff84663a305b4b670	-	ol8_x86_64_appstream
	libecap-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm	7ce5f67fdad91140179d1e1778fb3123534f78fbb97ba36ff84663a305b4b670	-	ol8_x86_64_appstream_developer
	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm	e5c3bd07c8367bf2d18ee41d3b7e4d6813cd2b48218d0ec529577b52d80f8145	-	ol8_x86_64_appstream
	libecap-devel-1.0.1-2.module+el8.3.0+7819+eb7d4ef6.x86_64.rpm	e5c3bd07c8367bf2d18ee41d3b7e4d6813cd2b48218d0ec529577b52d80f8145	-	ol8_x86_64_appstream_developer
	squid-4.15-6.0.1.module+el8.8.0+90059+985ac402.x86_64.rpm	f0504a86dfd907f615561bcb67e8feed4ff8c8a4ee1e357df94b8ab940c03599	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team