squid:4 security update

エラータID: AXSA:2022-3793:01

Release date: 
Monday, September 5, 2022 - 23:30
Subject: 
squid:4 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: DoS when processing gopher server responses (CVE-2021-46784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2021-46784
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Modularity name: squid
Stream name: 4

Solution: 

Update packages.

CVEs: 
CVE-2021-46784
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
Additional Info: 

N/A

Download: 

SRPMS
  1. libecap-1.0.1-2.module+el8+1515+d2468be4.src.rpm
    MD5: 8976afbc65759ca4a4326f1845bb2240
    SHA-256: 120fd3b157a35d00d702dd1f0de843113ba6d27bdab436179456ddda6ca1cdac
    Size: 343.56 kB
  2. squid-4.15-3.module+el8+1515+d2468be4.1.src.rpm
    MD5: af3964b0509061d02cae5c290d697ba6
    SHA-256: 20665d59197bad98bbc238add0926258cd94b47a265df84717dca76ff7ad3f2a
    Size: 2.43 MB

Asianux Server 8 for x86_64
  1. libecap-1.0.1-2.module+el8+1515+d2468be4.x86_64.rpm
    MD5: ab7eac50268d429f210ca356a5f3416c
    SHA-256: 82f2339c76cd509a15b0766a55883af281d81ea51007779b58ca8c5ffcfdd656
    Size: 27.74 kB
  2. libecap-debugsource-1.0.1-2.module+el8+1515+d2468be4.x86_64.rpm
    MD5: 6959a0293501e01d0aa04da73c971e14
    SHA-256: a3419e3bd4231faf1f9393ce91f3cd021e8bf76ece093ef41e105fb280f2b016
    Size: 18.91 kB
  3. libecap-devel-1.0.1-2.module+el8+1515+d2468be4.x86_64.rpm
    MD5: 6412c6a839e996dbff25cd36bcd35671
    SHA-256: 1c0b0245642e4ff65350672d9014f6a90284635e3353b3203065296892302e64
    Size: 20.44 kB
  4. squid-4.15-3.module+el8+1515+d2468be4.1.x86_64.rpm
    MD5: 0d2af98229613d001a2f1c720bba95fa
    SHA-256: 6f8bc474aa9bd10010496b8b417854366f0c4d89735dcfda8338724d4c359325
    Size: 3.57 MB
  5. squid-debugsource-4.15-3.module+el8+1515+d2468be4.1.x86_64.rpm
    MD5: a9fe6a4fe2b08dac5a263a954310e92c
    SHA-256: ca7e30153c70743d058b9b4b664ef6aa3e44f96523ed95a61052019f52db3644
    Size: 1.74 MB