Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Oracle Linux 9 ELSA-2024-0071 Critical Update: Squid DoS Mitigation

oracle
Calendar Grey January 11, 2024
Oracle Linux Logo Esm H88
Oracle Linux has released a critical update addressing multiple security flaws identified in the Squid software for its user base.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[7:5.5-6.0.1.el9_3.5] - squid: Denial of Service in SSL Certificate validation (CVE-2023-46724) - squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728) - squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285) - squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

Topics%20covered

Topics Covered

security advisory security update DoS threat mitigation Squid Oracle Linux

SRPMs

https://oss.oracle.com:443/ol9/SRPMS-updates//squid-5.5-6.0.1.el9_3.5.src.rpm

x86_64

squid-5.5-6.0.1.el9_3.5.x86_64.rpm

aarch64

squid-5.5-6.0.1.el9_3.5.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-46724 CVE-2023-46728 CVE-2023-49285 CVE-2023-49286

Topics%20covered

Topics Covered

security advisory security update DoS threat mitigation Squid Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here