ELSA-2024-9625

ELSA-2024-9625 - squid security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-11-18

Description

[7:5.5-14.3]
- Disable ESI support
- Resolves: RHEL-65076 - CVE-2024-45802 squid: Denial of Service processing ESI
response content

[7:5.5-14.2]
- Resolves: RHEL-64425 TCP_MISS_ABORTED/100 erros when uploading

[7:5.5-14.1]
- Resolves: RHEL-62332 - (Regression) Transfer-encoding:chunked data is not sent
to the client in its complementary

Related CVEs

CVE-2024-45802

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	squid-5.5-14.el9_5.3.src.rpm	e396cec6ec68cba9e329e8295a55ad06	-	ol9_aarch64_appstream
	squid-5.5-14.el9_5.3.aarch64.rpm	2ee24cf532622d5dc1c798533c002d5b	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	squid-5.5-14.el9_5.3.src.rpm	e396cec6ec68cba9e329e8295a55ad06	-	ol9_x86_64_appstream
	squid-5.5-14.el9_5.3.x86_64.rpm	35c287e468e44212ade696ffc96c6ded	-	ol9_x86_64_appstream