[ELSA-2024-4861] squid security update

Severity Moderate

Affected Packages 1

CVEs 2

[7:5.5-13]
- Resolves: RHEL-45056 - squid: Out-of-bounds write error may lead to Denial of
Service (CVE-2024-37894)
- Resolves: RHEL-45643 - squid: vulnerable to a Denial of Service attack against
Cache Manager error responses (CVE-2024-23638)

Package	Affected Version
pkg:rpm/oraclelinux/squid?distro=oraclelinux-9.4	< 5.5-13.el9_4

ID

ELSA-2024-4861

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2024-4861.html

Published

2024-07-25T00:00:00
(6 weeks ago)

Modified

2024-07-25T00:00:00
(6 weeks ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2024-4861	https://linux.oracle.com/errata/ELSA-2024-4861.html
CVE	CVE-2024-23638	https://linux.oracle.com/cve/CVE-2024-23638.html
CVE	CVE-2024-37894	https://linux.oracle.com/cve/CVE-2024-37894.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/oraclelinux/squid?distro=oraclelinux-9.4	oraclelinux	squid	< 5.5-13.el9_4	oraclelinux-9.4

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date