Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Security Measurement
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Insights
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2024:9814 - Security Advisory
Issued:
2024-11-18
Updated:
2024-11-18

RHSA-2024:9814 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Important: squid:4 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

  • BZ - 2322154 - CVE-2024-45802 squid: Denial of Service processing ESI response content

CVEs

  • CVE-2024-45802

References

  • https://access.redhat.com/security/updates/classification/#important
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src.rpm SHA-256: 2f43b6316609e9a09ecea6e01089d7d886d0024c1eae28f1c31d87670992f7ff
squid-4.15-3.module+el8.6.0+22491+132fca59.7.src.rpm SHA-256: 5a722fa44039771dcbfc8556751ae6fc1251f2277ca3b8ef7e274b248c04acdd
x86_64
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: d9d61e2135b220b3d61ae42ef3168afe872f28e6ba90ec1e7c12f99ee0cd09bf
libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: fcf34d948d19d8ceec11c33bfbd410918882c1e2d5f98d317d47f40935a8beca
libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 3a323f9bd1ce4c4fdba3eed2f8c5ab67ef86553708394d3ef6c55c579d339c60
libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 1b13a8613f81f5551073df17797db405c70acc0e332bbc915d50459e2e7f4530
squid-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: e90cdd8e8f4adc660bc433ac4535b159678df69074df477241f9ec92624cabb1
squid-debuginfo-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c20d2b23700e40ab5ca34aebb4c23ee815cf73afca78f6ada61c0ee01543585e
squid-debugsource-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c063e4a8761d4d95f165ba3268beff2505197eeb08b2e3cd9dba899f84770767

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src.rpm SHA-256: 2f43b6316609e9a09ecea6e01089d7d886d0024c1eae28f1c31d87670992f7ff
squid-4.15-3.module+el8.6.0+22491+132fca59.7.src.rpm SHA-256: 5a722fa44039771dcbfc8556751ae6fc1251f2277ca3b8ef7e274b248c04acdd
x86_64
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: d9d61e2135b220b3d61ae42ef3168afe872f28e6ba90ec1e7c12f99ee0cd09bf
libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: fcf34d948d19d8ceec11c33bfbd410918882c1e2d5f98d317d47f40935a8beca
libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 3a323f9bd1ce4c4fdba3eed2f8c5ab67ef86553708394d3ef6c55c579d339c60
libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 1b13a8613f81f5551073df17797db405c70acc0e332bbc915d50459e2e7f4530
squid-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: e90cdd8e8f4adc660bc433ac4535b159678df69074df477241f9ec92624cabb1
squid-debuginfo-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c20d2b23700e40ab5ca34aebb4c23ee815cf73afca78f6ada61c0ee01543585e
squid-debugsource-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c063e4a8761d4d95f165ba3268beff2505197eeb08b2e3cd9dba899f84770767

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src.rpm SHA-256: 2f43b6316609e9a09ecea6e01089d7d886d0024c1eae28f1c31d87670992f7ff
squid-4.15-3.module+el8.6.0+22491+132fca59.7.src.rpm SHA-256: 5a722fa44039771dcbfc8556751ae6fc1251f2277ca3b8ef7e274b248c04acdd
x86_64
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: d9d61e2135b220b3d61ae42ef3168afe872f28e6ba90ec1e7c12f99ee0cd09bf
libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: fcf34d948d19d8ceec11c33bfbd410918882c1e2d5f98d317d47f40935a8beca
libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 3a323f9bd1ce4c4fdba3eed2f8c5ab67ef86553708394d3ef6c55c579d339c60
libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 1b13a8613f81f5551073df17797db405c70acc0e332bbc915d50459e2e7f4530
squid-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: e90cdd8e8f4adc660bc433ac4535b159678df69074df477241f9ec92624cabb1
squid-debuginfo-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c20d2b23700e40ab5ca34aebb4c23ee815cf73afca78f6ada61c0ee01543585e
squid-debugsource-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c063e4a8761d4d95f165ba3268beff2505197eeb08b2e3cd9dba899f84770767

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src.rpm SHA-256: 2f43b6316609e9a09ecea6e01089d7d886d0024c1eae28f1c31d87670992f7ff
squid-4.15-3.module+el8.6.0+22491+132fca59.7.src.rpm SHA-256: 5a722fa44039771dcbfc8556751ae6fc1251f2277ca3b8ef7e274b248c04acdd
ppc64le
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm SHA-256: 1ba6e6a7a7f64c91b5f49112a2d3437e5a4156c04cb2664d9f06985ffd631fac
libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm SHA-256: 2ef0dadb839911f6fb556005df57f2531f2dd215e8bd7dceb39370910050c6a4
libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm SHA-256: 1cd7655a19f36b9eaf1cc95fd3e85d2f3cfa1a76e9206ca639fb16f14634f3dd
libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm SHA-256: 2d8756169558e12e281f18a9da93cc49c525ef908c8f2533f81e3a98b22d1e68
squid-4.15-3.module+el8.6.0+22491+132fca59.7.ppc64le.rpm SHA-256: 2c6ef0776597c01b4e1d091a89131886b478f884c672719806ed2d9216b2c90f
squid-debuginfo-4.15-3.module+el8.6.0+22491+132fca59.7.ppc64le.rpm SHA-256: 3511fa24502eb373df3e6fac245758490382a9a9e0bf44195c4d6dd461d9dc06
squid-debugsource-4.15-3.module+el8.6.0+22491+132fca59.7.ppc64le.rpm SHA-256: a78b3240a736fa537664b0177f1f6aca3bf34d93b2c973b159a11c30a5c6264d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src.rpm SHA-256: 2f43b6316609e9a09ecea6e01089d7d886d0024c1eae28f1c31d87670992f7ff
squid-4.15-3.module+el8.6.0+22491+132fca59.7.src.rpm SHA-256: 5a722fa44039771dcbfc8556751ae6fc1251f2277ca3b8ef7e274b248c04acdd
x86_64
libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: d9d61e2135b220b3d61ae42ef3168afe872f28e6ba90ec1e7c12f99ee0cd09bf
libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: fcf34d948d19d8ceec11c33bfbd410918882c1e2d5f98d317d47f40935a8beca
libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 3a323f9bd1ce4c4fdba3eed2f8c5ab67ef86553708394d3ef6c55c579d339c60
libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm SHA-256: 1b13a8613f81f5551073df17797db405c70acc0e332bbc915d50459e2e7f4530
squid-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: e90cdd8e8f4adc660bc433ac4535b159678df69074df477241f9ec92624cabb1
squid-debuginfo-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c20d2b23700e40ab5ca34aebb4c23ee815cf73afca78f6ada61c0ee01543585e
squid-debugsource-4.15-3.module+el8.6.0+22491+132fca59.7.x86_64.rpm SHA-256: c063e4a8761d4d95f165ba3268beff2505197eeb08b2e3cd9dba899f84770767

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility