Red Hat Security Advisory

RHSA-2023:7668

squid:4 security update

Released 2023-12-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4, libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4, libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4 +11

Fixes 3 records

TI-2025-34351 CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

HIGH 68

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22133 Published 2025-08-01 Partial fix · 6.4 CWE-122

TI-2023-26924 CVE-2023-49288

Denial of Service in HTTP Collapsed Forwarding in Squid

MEDIUM 51

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.04777 Published 2023-12-04 Partial fix · 6.0.1 CWE-416

TI-2023-05360 CVE-2023-5824

Squid: dos against http and https

LOW 39

A flaw was found in Squid.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03284 Published 2023-11-03 Partial fix · 8090020231130092412.a75119d5, 8020020240122164331.4cda2c84 +6 CWE-755