Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Oracle8: ELSA-2024-9644 Critical: Squid Denial of Service Fixes

oracle
Calendar Grey November 18, 2024
Oracle Linux Logo Esm H88
The Oracle Linux Security Notification ELSA-2024-9644 details crucial patches for Squid and its associated components.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

libecap squid [7:4.15-10.3] - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to a Denial of Service attack against Cache Manager error responses [7:4.15-10.2] - Disable ESI support - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service processing ESI response content [7:4.15-10.1] - Resolves: RHEL-56024 - (Regression) Transfer-encoding:chunked data is not sent to the client in its complementary

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates//libecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//squid-4.15-10.module+el8.10.0+90442+8ef3f586.3.src.rpm

x86_64

libecap-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm squid-4.15-10.module+el8.10.0+90442+8ef3f586.3.x86_64.rpm

aarch64

libecap-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm squid-4.15-10.module+el8.10.0+90442+8ef3f586.3.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2024-23638 CVE-2024-45802

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here