RHSA-2023:7668HighCVSS 8.9

Red Hat Security Advisory: squid:4 security update

Published
December 6, 2023
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2025-54574 →CVE-2023-5824 →CVE-2023-49288 →

📋 Description

CVE-2023-5824 — squid: DoS against HTTP and HTTPS CVE-2023-49288 — squid: Use-After-Free in the HTTP Collapsed Forwarding Feature CVE-2025-54574 — squid-cache: Squid Buffer Overflow

🎯 Affected products31

  • Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-0:1.0.1-2.module+el8.9.0+19703+a1da7223.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debuginfo-0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debuginfo-0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debuginfo-0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debuginfo-0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debugsource-0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debugsource-0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debugsource-0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-debugsource-0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-devel-0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-devel-0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-devel-0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libecap-devel-0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-7:4.15-7.module+el8.9.0+20806+014d88aa.3.src (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debuginfo-7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debuginfo-7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debuginfo-7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debuginfo-7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debugsource-7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64 (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debugsource-7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • squid-debugsource-7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x (squid:4) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +1 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the squid service will be restarted automatically. Workaround: Disabling the disk caching mechanism will mitigate this vulnerability. To achieve this, remove all the 'cache_dir' directives from the Squid configuration, typically in the /etc/squid/squid.conf file. Workaround: To mitigate this issue, lines for the 'collapsed_forwarding' feature have to be removed from your squid.conf. Workaround: Users can disable URN access permissions to mitigate this issue.

🔗 References (5)