ELSA-2024-1787 -- Oracle squidID: oval:org.secpod.oval:def:1507459 | Date: (C)2024-04-25 (M)2024-04-29 |
Class: PATCH | Family: unix |
[7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing - Resolves: CVE-2021-31806,31807,31808 squid: Handle more Range requests - Resolves: CVE-2021-33620 squid: Handle more partial responses [7:3.5.20-17.10] - Resolves: RHEL-16779 - squid: NULL pointer dereference in the gopher protocol code -- Remove support for Gopher protocol - Resolves: RHEL-18176 - squid: Buffer over-read in the HTTP Message processing feature - Resolves: RHEL-18171 - squid: Incorrect Check of Function Return Value In Helper Process management - Resolves: RHEL-16758 - squid: Denial of Service in SSL Certificate validation - Resolves: RHEL-19557 - squid: denial of service in HTTP request parsing - Resolves: RHEL-26082 - squid: denial of service in HTTP header parser