squid:4 security update

エラータID: AXSA:2024-7389:01

Release date: 
Monday, January 15, 2024 - 09:02
Subject: 
squid:4 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Squid is a high-performance proxy caching server for web clients, supporting
FTP, Gopher, and HTTP data objects.

Security Fix(es):

squid: DoS against HTTP and HTTPS (CVE-2023-5824)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE(s):
CVE-2023-5824:
Squid is vulnerable to Denial of Service attack against HTTP and HTTPS clients due to an Improper Handling of Structural Elements bug.

Modularity name: "squid"
Stream name: "4"

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libecap-1.0.1-2.module+el8+1707+d59213b9.src.rpm
    MD5: 407db679f83440fe4bea4a77f956164d
    SHA-256: 28e948d63159b425e0814655bab96e4d1516f6f0b21a03a2026852dba44998d5
    Size: 343.56 kB
  2. squid-4.15-7.module+el8+1707+d59213b9.3.src.rpm
    MD5: 98a6503dbd52c7824297027d7bd1aef1
    SHA-256: 5dc8cdd490980bc0cafdf4ee347da10601c6c9c87dd113752332bdf01bd2d8c9
    Size: 2.50 MB

Asianux Server 8 for x86_64
  1. libecap-1.0.1-2.module+el8+1707+d59213b9.x86_64.rpm
    MD5: 4e27b7211c7feb8fc074af80701e9de8
    SHA-256: 63ef49b51b8bf5c955d817519ae60d77f84be6bf085505a2d1f004a388a64e2d
    Size: 27.74 kB
  2. libecap-debugsource-1.0.1-2.module+el8+1707+d59213b9.x86_64.rpm
    MD5: f77ca94bc9e5806703fc20419ee292a9
    SHA-256: 0e8c1c9f7e4f3b9ed56024a586c88dc8ba100fadd6d6094a453cc4825bd70dd6
    Size: 18.90 kB
  3. libecap-devel-1.0.1-2.module+el8+1707+d59213b9.x86_64.rpm
    MD5: a9852db046a187e27ba25f130bf72a9a
    SHA-256: 20346bfb98d22aab6b3e6b48eed9de9e442df7bcb94bdc17ad5b334172dbc83d
    Size: 20.44 kB
  4. squid-4.15-7.module+el8+1707+d59213b9.3.x86_64.rpm
    MD5: e5f822dd96cb2caa4da296617189ac9d
    SHA-256: 031f7c6f241979546b632634bd7d84ccfd96b75014b53935e07b9c393a1c1d65
    Size: 3.58 MB
  5. squid-debugsource-4.15-7.module+el8+1707+d59213b9.3.x86_64.rpm
    MD5: 37230920c4f7bbaea5d319d22e88c9ed
    SHA-256: f1e3d32dbf9c9f3addb3fd9b27d488c2fbb1e624988f03fb29764c19b7653e9b
    Size: 1.75 MB