Lucene search

K
osvGoogleOSV:ALSA-2022:1939
HistoryMay 10, 2022 - 12:00 a.m.

Moderate: squid:4 security and bug fix update

2022-05-1000:00:00
Google
osv.dev
7
squid
proxy server
security update
bug fix
information disclosure
wccp protocol

AI Score

5.3

Confidence

High

EPSS

0.057

Percentile

93.4%

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):

  • squid: out-of-bounds read in WCCP protocol data may lead to information disclosure (CVE-2021-28116)
    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    Additional Changes:
    For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.