RHSA-2019:2593

csafUSredhat_csaf

Red Hat Security Advisory: squid:4 security update

view advisory published 2019-09-03

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-12527UShigh8.8—
An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does n…
02

references

External citations — patches, advisories, analysis.

03

remediations (60)

  • Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-7:4.4-5.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan