Oval Definition:oval:com.redhat.rhsa:def:20214292
Revision Date:2021-11-09Version:635
Title:RHSA-2021:4292: squid:4 security, bug fix, and enhancement update (Moderate)
Description:Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

  • The following packages have been upgraded to a later upstream version: squid (4.15). (BZ#1964384)

    Security Fix(es):

  • squid: denial of service in URN processing (CVE-2021-28651)

  • squid: denial of service issue in Cache Manager (CVE-2021-28652)

  • squid: denial of service in HTTP response processing (CVE-2021-28662)

  • squid: improper input validation in HTTP Range header (CVE-2021-31806)

  • squid: incorrect memory management in HTTP Range header (CVE-2021-31807)

  • squid: integer overflow in HTTP Range header (CVE-2021-31808)

  • squid: denial of service in HTTP response processing (CVE-2021-33620)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2021-28651
    CVE-2021-28652
    CVE-2021-28662
    CVE-2021-31806
    CVE-2021-31807
    CVE-2021-31808
    CVE-2021-33620
    RHSA-2021:4292
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • Module squid:4 is enabled
  • BACK