Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2025:0004
Issued: 2025-01-10
Updated: 2025-01-10
Summary
squid security update
Severity
Important
Description
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:
CVE-2023-46846:
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
References
Updated Packages
- aarch64
- squid-3.5.20-17.1.al7.13.aarch64.rpm → (download)
- squid-debuginfo-3.5.20-17.1.al7.13.aarch64.rpm → (download)
- squid-migration-script-3.5.20-17.1.al7.13.aarch64.rpm → (download)
- squid-sysvinit-3.5.20-17.1.al7.13.aarch64.rpm → (download)
- i686
- squid-3.5.20-17.1.al7.13.i686.rpm → (download)
- squid-debuginfo-3.5.20-17.1.al7.13.i686.rpm → (download)
- squid-migration-script-3.5.20-17.1.al7.13.i686.rpm → (download)
- squid-sysvinit-3.5.20-17.1.al7.13.i686.rpm → (download)
- src
- squid-3.5.20-17.1.al7.13.src.rpm → (download)
- x86_64
- squid-3.5.20-17.1.al7.13.x86_64.rpm → (download)
- squid-debuginfo-3.5.20-17.1.al7.13.x86_64.rpm → (download)
- squid-migration-script-3.5.20-17.1.al7.13.x86_64.rpm → (download)
- squid-sysvinit-3.5.20-17.1.al7.13.x86_64.rpm → (download)