(RHSA-2020:3623) Important: squid:4 security update

2020-09-0312:36:52

access.redhat.com

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.002 Low

EPSS

Percentile

56.7%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

squid: HTTP Request Smuggling could result in cache poisoning (CVE-2020-15810)
squid: HTTP Request Splitting could result in cache poisoning (CVE-2020-15811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lesquid< 4.4-8.module+el8.1.0+7837+e38d3ca0.2squid-4.4-8.module+el8.1.0+7837+e38d3ca0.2.ppc64le.rpm
RedHatanyppc64lesquid-debugsource< 4.4-8.module+el8.2.0+7834+b8ecaeef.2squid-debugsource-4.4-8.module+el8.2.0+7834+b8ecaeef.2.ppc64le.rpm
RedHatanyppc64lelibecap-debuginfo< 1.0.1-2.module+el8.0.0+4045+70edde92libecap-debuginfo-1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le.rpm
RedHatanyaarch64squid-debugsource< 4.4-8.module+el8.1.0+7837+e38d3ca0.2squid-debugsource-4.4-8.module+el8.1.0+7837+e38d3ca0.2.aarch64.rpm
RedHatanyx86_64libecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyppc64lesquid-debuginfo< 4.4-8.module+el8.2.0+7834+b8ecaeef.2squid-debuginfo-4.4-8.module+el8.2.0+7834+b8ecaeef.2.ppc64le.rpm
RedHatanyaarch64squid-debuginfo< 4.4-8.module+el8.1.0+7837+e38d3ca0.2squid-debuginfo-4.4-8.module+el8.1.0+7837+e38d3ca0.2.aarch64.rpm
RedHatanys390xsquid-debugsource< 4.4-8.module+el8.2.0+7834+b8ecaeef.2squid-debugsource-4.4-8.module+el8.2.0+7834+b8ecaeef.2.s390x.rpm
RedHatanyx86_64libecap-devel< 1.0.1-2.module+el8.0.0+4045+70edde92libecap-devel-1.0.1-2.module+el8.0.0+4045+70edde92.x86_64.rpm
RedHatanyx86_64libecap-debuginfo< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	squid	< 4.4-8.module+el8.1.0+7837+e38d3ca0.2	squid-4.4-8.module+el8.1.0+7837+e38d3ca0.2.ppc64le.rpm
RedHat	any	ppc64le	squid-debugsource	< 4.4-8.module+el8.2.0+7834+b8ecaeef.2	squid-debugsource-4.4-8.module+el8.2.0+7834+b8ecaeef.2.ppc64le.rpm
RedHat	any	ppc64le	libecap-debuginfo	< 1.0.1-2.module+el8.0.0+4045+70edde92	libecap-debuginfo-1.0.1-2.module+el8.0.0+4045+70edde92.ppc64le.rpm
RedHat	any	aarch64	squid-debugsource	< 4.4-8.module+el8.1.0+7837+e38d3ca0.2	squid-debugsource-4.4-8.module+el8.1.0+7837+e38d3ca0.2.aarch64.rpm
RedHat	any	x86_64	libecap	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHat	any	ppc64le	squid-debuginfo	< 4.4-8.module+el8.2.0+7834+b8ecaeef.2	squid-debuginfo-4.4-8.module+el8.2.0+7834+b8ecaeef.2.ppc64le.rpm
RedHat	any	aarch64	squid-debuginfo	< 4.4-8.module+el8.1.0+7837+e38d3ca0.2	squid-debuginfo-4.4-8.module+el8.1.0+7837+e38d3ca0.2.aarch64.rpm
RedHat	any	s390x	squid-debugsource	< 4.4-8.module+el8.2.0+7834+b8ecaeef.2	squid-debugsource-4.4-8.module+el8.2.0+7834+b8ecaeef.2.s390x.rpm
RedHat	any	x86_64	libecap-devel	< 1.0.1-2.module+el8.0.0+4045+70edde92	libecap-devel-1.0.1-2.module+el8.0.0+4045+70edde92.x86_64.rpm
RedHat	any	x86_64	libecap-debuginfo	< 1.0.1-2.module+el8.1.0+4044+36416a77	libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm