Vulmon
Amazon Linux 1 Security Advisory: ALAS-2024-1933
Advisory Release Date: 2024-04-25 16:04 Pacific
Advisory Updated Date: 2024-04-25 16:04 Pacific
Severity:
Important
Issue Overview:
Due to chunked decoder lenience Squid is vulnerable to Request/Response smuggling attacks when parsing HTTP/1.1 and ICAP messages. (CVE-2023-46846)
Affected Packages:
squid
Issue Correction:
Run yum update squid to update your system.
New Packages:
i686:
squid-3.5.20-17.55.amzn1.i686
squid-migration-script-3.5.20-17.55.amzn1.i686
squid-debuginfo-3.5.20-17.55.amzn1.i686
src:
squid-3.5.20-17.55.amzn1.src
x86_64:
squid-debuginfo-3.5.20-17.55.amzn1.x86_64
squid-3.5.20-17.55.amzn1.x86_64
squid-migration-script-3.5.20-17.55.amzn1.x86_64