Lucene search

K
osvGoogleOSV:RLSA-2022:1939
HistoryMay 10, 2022 - 6:39 a.m.

Moderate: squid:4 security and bug fix update

2022-05-1006:39:58
Google
osv.dev
10
squid proxy
security update
bug fix
information disclosure
wccp protocol
cve-2021-28116
rocky linux 8.6.

AI Score

5.3

Confidence

High

EPSS

0.057

Percentile

93.4%

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: out-of-bounds read in WCCP protocol data may lead to information disclosure (CVE-2021-28116)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.