[CLSA-2024:1716272474] Fix CVE(s): CVE-2023-49288
Type:
security
Severity:
Important
Release date:
2024-05-21 06:21:17 UTC
Description:
* SECURITY UPDATE: Denial of Service attack against HTTP header parsing - debian/patches/CVE-2023-49288.patch: fix unintentional freeing in TRACE request handler - CVE-2023-49288
Updated packages:
  • squid_3.5.12-1ubuntu7.17+tuxcare.els8_amd64.deb
    sha:ebfcea674cbc22cc655dbe561ba967259c104ad4
  • squid-cgi_3.5.12-1ubuntu7.17+tuxcare.els8_amd64.deb
    sha:838bae7f09e9e42912e829fcb6d04f5ea86b6711
  • squid-common_3.5.12-1ubuntu7.17+tuxcare.els8_all.deb
    sha:cf46920439ad33717698e9533f3c483c017dd7d9
  • squid-purge_3.5.12-1ubuntu7.17+tuxcare.els8_amd64.deb
    sha:83b551681873687cb91a86d9d845d8497ea80a01
  • squid3_3.5.12-1ubuntu7.17+tuxcare.els8_all.deb
    sha:55bae65a3c5f358a2045758397fedab039d61e90
  • squidclient_3.5.12-1ubuntu7.17+tuxcare.els8_amd64.deb
    sha:17e7a5619bacc06c29fb3329c3bdef38cb9baddf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.