Red Hat 製品エラータ RHSA-2024:11049 - Security Advisory
発行日:
2024-12-16
更新日:
2024-12-16

RHSA-2024:11049 - Security Advisory

概要

Important: squid security update

タイプ/重大度

Security Advisory: Important

Red Hat Insights パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for squid is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

修正

  • BZ - 2245910 - CVE-2023-46846 squid: Request/Response smuggling in HTTP/1.1 and ICAP

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
squid-3.5.20-17.el7_9.13.src.rpm SHA-256: 0a8bc4a60f224bfe0404baa596b841681256de1ba3f340efd897ddbd1bf8d4fc
x86_64
squid-3.5.20-17.el7_9.13.x86_64.rpm SHA-256: 70b497fe493cd2925c2e5c1aec8c0c49fde06c65ec697ca50afd5149c5cdda4b
squid-debuginfo-3.5.20-17.el7_9.13.x86_64.rpm SHA-256: 0163776b867d012292b6a58cb0b7d8c46fe3e78e8336c92acb7e4d37944ce9ce
squid-debuginfo-3.5.20-17.el7_9.13.x86_64.rpm SHA-256: 0163776b867d012292b6a58cb0b7d8c46fe3e78e8336c92acb7e4d37944ce9ce
squid-migration-script-3.5.20-17.el7_9.13.x86_64.rpm SHA-256: a79a3616b10cec507b878aacdf8f0f3f26c8216e8c61b6af3ec8ec562272e00f
squid-sysvinit-3.5.20-17.el7_9.13.x86_64.rpm SHA-256: cee6f2ee6253ceec79ef94ff98e76397ad39d553cbe56224abff7c89acdeb492

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
squid-3.5.20-17.el7_9.13.src.rpm SHA-256: 0a8bc4a60f224bfe0404baa596b841681256de1ba3f340efd897ddbd1bf8d4fc
s390x
squid-3.5.20-17.el7_9.13.s390x.rpm SHA-256: 0f7d916b5c79a7492ff1c8b1fc8f61604a5e576d65d8ac1a35d62f0e7136d87d
squid-debuginfo-3.5.20-17.el7_9.13.s390x.rpm SHA-256: 0d1bfab78d9ab3342d571f70e1f5c1b52daf10bde02a50729bba8d56e1b35047
squid-debuginfo-3.5.20-17.el7_9.13.s390x.rpm SHA-256: 0d1bfab78d9ab3342d571f70e1f5c1b52daf10bde02a50729bba8d56e1b35047
squid-migration-script-3.5.20-17.el7_9.13.s390x.rpm SHA-256: b7da500b3e3ec09b22532cbec7407bc6b9db1c901fe764d397a122db044c6410
squid-sysvinit-3.5.20-17.el7_9.13.s390x.rpm SHA-256: 3b84569bc5c52fb4177b8cb815b8def2ca02125492d6d16084ea057eeb9c0f01

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
squid-3.5.20-17.el7_9.13.src.rpm SHA-256: 0a8bc4a60f224bfe0404baa596b841681256de1ba3f340efd897ddbd1bf8d4fc
ppc64
squid-3.5.20-17.el7_9.13.ppc64.rpm SHA-256: b1ba4e4a3cad25aeef85cf3c53a1396b6df6eddd8362ce30e7f1443f8a13a909
squid-debuginfo-3.5.20-17.el7_9.13.ppc64.rpm SHA-256: b6e583937290a95817514741c6b046f7be30c1c18cbeca211c69126d1ff1c97b
squid-debuginfo-3.5.20-17.el7_9.13.ppc64.rpm SHA-256: b6e583937290a95817514741c6b046f7be30c1c18cbeca211c69126d1ff1c97b
squid-migration-script-3.5.20-17.el7_9.13.ppc64.rpm SHA-256: 2e22e2d7909aaba62a8c4d144782a45069190911bf73c7606d7e649fd35b1a35
squid-sysvinit-3.5.20-17.el7_9.13.ppc64.rpm SHA-256: 7da6216e7fa6589d559fd4c2206aaf9a876d6209bc454853bc23532aee73628a

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
squid-3.5.20-17.el7_9.13.src.rpm SHA-256: 0a8bc4a60f224bfe0404baa596b841681256de1ba3f340efd897ddbd1bf8d4fc
ppc64le
squid-3.5.20-17.el7_9.13.ppc64le.rpm SHA-256: 26a0ca510cda5f23120d6bf9b1745e58467b36f76fce7e89916ac7c47cbcc53f
squid-debuginfo-3.5.20-17.el7_9.13.ppc64le.rpm SHA-256: fe039b819436797839a802b666beb14a44bd92b5a17e4e226dd808455354ca93
squid-debuginfo-3.5.20-17.el7_9.13.ppc64le.rpm SHA-256: fe039b819436797839a802b666beb14a44bd92b5a17e4e226dd808455354ca93
squid-migration-script-3.5.20-17.el7_9.13.ppc64le.rpm SHA-256: 31586e09d69e0a8393f8770481d88e8a9d6692ccab6dd620b401cc29393b952b
squid-sysvinit-3.5.20-17.el7_9.13.ppc64le.rpm SHA-256: f9980166027231f7cc19472a296496c8453653f45c5c5c066231d85ad9eb0082

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。