RHSA-2019:2593

csafUSredhat_csaf

Red Hat Security Advisory: squid:4 security update

Advisory ansehen veröffentlicht 2019-09-03

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-12527UShigh8.8—
An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does n…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (60)

  • Behobenlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobenlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-7:4.4-5.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Behobensquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:2593
  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debuginfo-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-debugsource-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundlibecap-devel-0:1.0.1-2.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debuginfo-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

  • Workaroundsquid-debugsource-7:4.4-5.module+el8.0.0+4045+70edde92.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)

    Deny ftp:// protocol URLs being proxied and Cache Manager report access to all clients: acl FTP proto FTP http_access deny FTP http_access deny manager

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan