Moderate: squid:4 security, bug fix, and enhancement update
Summary
ALSA-2021:4292: Moderate: squid:4 security, bug fix, and enhancement update. Affects libecap versions < 1.0.1-2.module_el8.6.0+2741+01592ae8. Fixed in 1.0.1-2.module_el8.6.0+2741+01592ae8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It is widely used to improve web server performance by caching frequently accessed content. Squid is a critical component in many web infrastructure setups.
Vulnerability Detail
This update addresses several security vulnerabilities in Squid version 4.15. These vulnerabilities include:
- CVE-2021-28651: Denial of service in URN processing
- CVE-2021-28652: Denial of service issue in Cache Manager
- CVE-2021-28662: Denial of service in HTTP response processing
- CVE-2021-31806: Improper input validation in HTTP Range header
- CVE-2021-31807: Incorrect memory management in HTTP Range header
- CVE-2021-31808: Integer overflow in HTTP Range header
- CVE-2021-33620: Denial of service in HTTP response processing
These vulnerabilities could allow an attacker to cause a denial of service or potentially execute arbitrary code on the affected system. The impact of these vulnerabilities varies, but in some cases, they could lead to the compromise of sensitive information or disruption of services.
How To Fix
Minimum fixed version
1.0.1-2.module_el8.6.0+2741+01592ae8
This is the first release that contains the fix.
sudo dnf update libecapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This update addresses several security vulnerabilities in Squid and provides bug fixes and enhancements. It is recommended to update the affected packages to ensure the security and stability of your Squid installation. If you need further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libecap →
FAQ
Squid is a high-performance proxy caching server for web clients. It improves web server performance by caching frequently accessed content.
These vulnerabilities could allow an attacker to cause a denial of service or potentially execute arbitrary code on the affected system. The impact varies, but in some cases, it could lead to the compromise of sensitive information or disruption of services.
To fix these vulnerabilities, update the affected packages to the latest version and restart the Squid service.
No specific workarounds have been mentioned for these vulnerabilities.
You can find more information about these vulnerabilities in the CVE pages listed in the References section of the original advisory.
Related vulnerabilities
Recent vulnerabilities recorded for libecap.
