ELSA-2023-6748

ELSA-2023-6748 - squid security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2023-11-16

Description

[7:5.5-6.1]
- Resolves: RHEL-14819 - squid: squid: denial of Servicein FTP
- Resolves: RHEL-14807 - squid: squid: Denial of Service in HTTP Digest
Authentication
- Resolves: RHEL-14780 - squid: squid: Request/Response smuggling in HTTP/1.1
and ICAP

[7:5.5-6]
- Resolves: #2231827 - Crash with half_closed_client on

Related CVEs

CVE-2023-46847

CVE-2023-46846

CVE-2023-46848

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	squid-5.5-6.el9_3.1.src.rpm	ecad2375eaa55a6ed4fb28c4bbe2d16b3741530f5723145f4e2344b5d1cc1a34	-	ol9_aarch64_appstream
	squid-5.5-6.el9_3.1.aarch64.rpm	b400fc6f69956128c3ca0a1c73fb2ab2ef262d6f9136dd4824b136970d72d5fa	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	squid-5.5-6.el9_3.1.src.rpm	ecad2375eaa55a6ed4fb28c4bbe2d16b3741530f5723145f4e2344b5d1cc1a34	-	ol9_x86_64_appstream
	squid-5.5-6.el9_3.1.x86_64.rpm	4e42360d2c51c97c55537db11d1a313f2bc28f5e98cea501eaf6e63fdfbbad89	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team