RHSA-2023:7465HighCVSS 8.9

Red Hat Security Advisory: squid security update

Published
November 22, 2023
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2023-5824 →CVE-2023-49288 →CVE-2025-54574 →

📋 Description

CVE-2023-5824 — squid: DoS against HTTP and HTTPS CVE-2023-49288 — squid: Use-After-Free in the HTTP Collapsed Forwarding Feature CVE-2025-54574 — squid-cache: Squid Buffer Overflow

🎯 Affected products14

  • Red Hat Enterprise Linux AppStream (v. 9)
  • squid-7:5.5-6.el9_3.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-7:5.5-6.el9_3.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-7:5.5-6.el9_3.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-7:5.5-6.el9_3.2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-7:5.5-6.el9_3.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debuginfo-7:5.5-6.el9_3.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debuginfo-7:5.5-6.el9_3.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debuginfo-7:5.5-6.el9_3.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debuginfo-7:5.5-6.el9_3.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debugsource-7:5.5-6.el9_3.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debugsource-7:5.5-6.el9_3.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debugsource-7:5.5-6.el9_3.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
  • squid-debugsource-7:5.5-6.el9_3.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically. Workaround: Disabling the disk caching mechanism will mitigate this vulnerability. To achieve this, remove all the 'cache_dir' directives from the Squid configuration, typically in the /etc/squid/squid.conf file. Workaround: To mitigate this issue, lines for the 'collapsed_forwarding' feature have to be removed from your squid.conf. Workaround: Users can disable URN access permissions to mitigate this issue.

🔗 References (4)