Red Hat Security Advisory

RHSA-2024:1787

squid security update

Released 2024-04-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) squid-7:3.5.20-17.el7_9.10, squid-migration-script-7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.5.20-17.el7_9.10, squid-migration-script-7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.10

TI-2024-16845 CVE-2024-25617

HIGH 81

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88094 Published 2024-02-14 Partial fix · 6.5 CWE-182

TI-2023-26921 CVE-2023-49285

HIGH 79

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.88144 Published 2023-12-04 Partial fix · 6.5 CWE-126

TI-2023-27496 CVE-2023-50269

HIGH 77

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.57627 Published 2023-12-14 Partial fix · 6.6 CWE-674

TI-2023-26922 CVE-2023-49286

MEDIUM 50

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.10352 Published 2023-12-04 Partial fix · 6.5 CWE-253

TI-2023-25207 CVE-2023-46724

MEDIUM 48

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02807 Published 2023-11-01 Partial fix · 6.4 CWE-125

TI-2023-25211 CVE-2023-46728

MEDIUM 45

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03775 Published 2023-11-06 Partial fix · 6.0.1 CWE-476