Red Hat Product Errata RHSA-2014:0597 - Security Advisory
Issued:
2014-06-03
Updated:
2014-06-03

RHSA-2014:0597 - Security Advisory

Synopsis

Moderate: squid security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated squid packages that fix one security issue are now available for
Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

Squid is a high-performance proxy caching server for web clients,
supporting FTP, Gopher, and HTTP data objects.

A denial of service flaw was found in the way Squid processed certain HTTPS
requests when the SSL Bump feature was enabled. A remote attacker could
send specially crafted requests that could cause Squid to crash.
(CVE-2014-0128)

Red Hat would like to thank the Squid project for reporting this issue.
Upstream acknowledges Mathias Fischer and Fabian Hugelshofer from Open
Systems AG as the original reporters.

All squid users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing this
update, the squid service will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5 i386
  • Red Hat Enterprise Linux Server - AUS 6.5 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.5 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.5 ppc64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - TUS 6.5 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 1074870 - CVE-2014-0128 squid: denial of service when using SSL-Bump

Red Hat Enterprise Linux Server 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux Server - AUS 6.5

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux Workstation 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
s390x
squid-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 907c2686ef0455258d81ffe9bd989e58691b23f42dc1898888cad8755d7f0695
squid-debuginfo-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 27b5e1d9ab19624aaaa763d815735173f89ce26e67f8ffd373a8037c6ad11455

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.5

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
s390x
squid-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 907c2686ef0455258d81ffe9bd989e58691b23f42dc1898888cad8755d7f0695
squid-debuginfo-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 27b5e1d9ab19624aaaa763d815735173f89ce26e67f8ffd373a8037c6ad11455

Red Hat Enterprise Linux for Power, big endian 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
ppc64
squid-3.1.10-20.el6_5.3.ppc64.rpm SHA-256: d4c2f532e3e6bc03895c9142b465bea5823b31698842394299f76536faa1f9b2
squid-debuginfo-3.1.10-20.el6_5.3.ppc64.rpm SHA-256: 9bf8cea59ed97a9d87b82c85e7649e28b07387d0af56e4a3e6f08a79b5afedea

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.5

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
ppc64
squid-3.1.10-20.el6_5.3.ppc64.rpm SHA-256: d4c2f532e3e6bc03895c9142b465bea5823b31698842394299f76536faa1f9b2
squid-debuginfo-3.1.10-20.el6_5.3.ppc64.rpm SHA-256: 9bf8cea59ed97a9d87b82c85e7649e28b07387d0af56e4a3e6f08a79b5afedea

Red Hat Enterprise Linux Server from RHUI 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux Server - TUS 6.5

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
s390x
squid-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 907c2686ef0455258d81ffe9bd989e58691b23f42dc1898888cad8755d7f0695
squid-debuginfo-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 27b5e1d9ab19624aaaa763d815735173f89ce26e67f8ffd373a8037c6ad11455

Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
x86_64
squid-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 286cdf041b988c4cfb838358b997c3719af96e4e66a104d8ba812094b28d3fa3
squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm SHA-256: 751d718d326b7cc1c73985ed8f3093965e849b9153fe3c6dd4bafdab6b64aa17
i386
squid-3.1.10-20.el6_5.3.i686.rpm SHA-256: d59a0b58590e6aa8fd494d4b078627b6b78b51bc50cac8dfd36e8dca07e2936a
squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm SHA-256: ff392d4c27bf558b337721c6e52016ab5fcb074061d936587bdcff49560f963a

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
squid-3.1.10-20.el6_5.3.src.rpm SHA-256: e499d9d5f4c683e833cc9964ad1087f8b42931da82214fa1fdf1ef17b0b31eea
s390x
squid-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 907c2686ef0455258d81ffe9bd989e58691b23f42dc1898888cad8755d7f0695
squid-debuginfo-3.1.10-20.el6_5.3.s390x.rpm SHA-256: 27b5e1d9ab19624aaaa763d815735173f89ce26e67f8ffd373a8037c6ad11455

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.