Debian: Apache Critical RCE DoS Security Patch DLA-4312-1 CVE-2023-5825

CVE-2023-5824

A flaw was found in Squid. The limits applied for validation of HTTP
response headers are applied before caching. However,
Squid may grow a cached HTTP response header beyond the configured
maximum size, causing a stall or crash of the worker process when a
large header is retrieved from the disk cache, resulting in a denial
of service.

CVE-2023-46728

Due to a NULL pointer dereference bug Squid is vulnerable to a
Denial of Service attack against Squid's Gopher gateway.
The obsolete gopher protocol, even if non functional,
was always available and enabled.
Responses triggering this bug are possible to be received
from any gopher server, even those without malicious intent.
Gopher support (already non functional) has been removed to fix
this CVE.
Note that gopher was deprecated and major browsers removed it,
long time ago.

CVE-2025-54574

Squid is vulnerable to a heap buffer overflow and possible remote