Red Hat Security Advisory: squid:4 security update
An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11945US | critical9.8 | — | ||
An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occ… | ||||
| CVE-2019-12519US | critical9.8 | — | ||
An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to ho… | ||||
references
External citations — patches, advisories, analysis.
remediations (32)
- Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-7:4.4-5.module+el8.0.0+6430+d78e5241.1.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-7:4.4-5.module+el8.0.0+6430+d78e5241.1.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-7:4.4-5.module+el8.0.0+6430+d78e5241.1.src (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-7:4.4-5.module+el8.0.0+6430+d78e5241.1.src (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-7:4.4-5.module+el8.0.0+6430+d78e5241.1.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-7:4.4-5.module+el8.0.0+6430+d78e5241.1.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+6430+d78e5241.1.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+6430+d78e5241.1.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+6430+d78e5241.1.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debuginfo-7:4.4-5.module+el8.0.0+6430+d78e5241.1.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+6430+d78e5241.1.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+6430+d78e5241.1.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+6430+d78e5241.1.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038 - Fixedsquid-debugsource-7:4.4-5.module+el8.0.0+6430+d78e5241.1.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.0)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.
https://access.redhat.com/errata/RHSA-2020:2038
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan