RLSA-2023:6267

Synopsis

Critical: squid:4 security update

Description

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

* SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2245910 2245916

CVEs

CVE-2023-46846 CVE-2023-46847

Affected packages

Rocky Linux 8 aarch64 - AppStream

libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm squid-7:4.15-6.module+el8.8.0+1273+55f5b063.aarch64.rpm squid-7:4.15-6.module+el8.8.0+1273+55f5b063.src.rpm squid-debuginfo-7:4.15-6.module+el8.8.0+1273+55f5b063.aarch64.rpm squid-debugsource-7:4.15-6.module+el8.8.0+1273+55f5b063.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm squid-7:4.15-6.module+el8.8.0+1273+55f5b063.src.rpm squid-7:4.15-6.module+el8.8.0+1273+55f5b063.x86_64.rpm squid-debuginfo-7:4.15-6.module+el8.8.0+1273+55f5b063.x86_64.rpm squid-debugsource-7:4.15-6.module+el8.8.0+1273+55f5b063.x86_64.rpm