squid:4 security update

エラータID: AXSA:2022-3877:01

Release date: 
Wednesday, October 5, 2022 - 07:52
Subject: 
squid:4 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: buffer-over-read in SSPI and SMB authentication (CVE-2022-41318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2022-41318
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Modularity name: squid
Stream name: 4

Solution: 

Update packages.

CVEs: 
CVE-2022-41318
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Additional Info: 

N/A

Download: 

SRPMS
  1. libecap-1.0.1-2.module+el8+1532+e6a4c47f.src.rpm
    MD5: 21a89778a1564db0a81289afeb81fc78
    SHA-256: 24fb221382f7c6ca56247a1e4c7bdec9dbad48838257ef2ab1fc4e76e66ca77b
    Size: 343.56 kB
  2. squid-4.15-3.module+el8+1532+e6a4c47f.2.src.rpm
    MD5: 95f13aad6481b93064e1baa5603de2c0
    SHA-256: eec6d5fc5a65da756828246a3efa6bbfb2eda558bf1d9fa70926395e7a3d13f4
    Size: 2.43 MB

Asianux Server 8 for x86_64
  1. libecap-1.0.1-2.module+el8+1532+e6a4c47f.x86_64.rpm
    MD5: 8dc34f75403e9d29fd7367b62fbd24be
    SHA-256: 5c002bef270b81773045b19a4839addfcd0949677aeee99bcbcc8ef0b3f218c5
    Size: 27.73 kB
  2. libecap-debugsource-1.0.1-2.module+el8+1532+e6a4c47f.x86_64.rpm
    MD5: 9fc65c2cf4e59530e2052f99da5c9eb6
    SHA-256: 5d58daf7b2877c2c9fb3ae8ec7ace3edd211819f51acd1eadd56fed1b5896a65
    Size: 18.90 kB
  3. libecap-devel-1.0.1-2.module+el8+1532+e6a4c47f.x86_64.rpm
    MD5: a918868a7916871e8699d0e145343ac8
    SHA-256: 37f44d5e0f9250d74fb0face2a36d09d73a85ddd699a33b8a6c5a4974b77ba7c
    Size: 20.44 kB
  4. squid-4.15-3.module+el8+1532+e6a4c47f.2.x86_64.rpm
    MD5: e8daee93614f3e42678a589fd6cdd921
    SHA-256: 8cfd10ebf1aeffe31be73c1c40b401ccbdc60947fbfcce75a0ea171b4ac2dba3
    Size: 3.57 MB
  5. squid-debugsource-4.15-3.module+el8+1532+e6a4c47f.2.x86_64.rpm
    MD5: 61236863900cb4f402783568718105df
    SHA-256: 90802a4f86413af278fa0ba6033fce4b32bfde7e16e30d2fea78db789acc4a42
    Size: 1.74 MB