[ol8_appstream] squid-7:4.15-7.module+el8.9.0+90111+615ac445.5.aarch64

Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.

Changelog (Show File list) (Show related packages)

• Wed Jan 03 2024 Tianyue Lan <tianyue.lan@oracle.com> - 7:4.15-7.5

  - Fix squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
  - Fix squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
  - Fix squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
  - Fix squid: Incorrect Check of Function Return Value In Helper Process management(CVE-2023-49286)

• Sat Dec 09 2023 Alex Burmashev <alexander.burmashev@oracle.com> - 7:4.15-7.3

  - Fix squid: DoS against HTTP and HTTPS (CVE-2023-5824)

• Mon Oct 30 2023 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-7.1

  - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest
    Authentication
  - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP

• Wed Aug 16 2023 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-7

  - Resolves: #2076717 - Crash with half_closed_client on

• Thu Dec 08 2022 Tomas Korbar <tkorbar@redhat.com> - 4.15-6

  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.

• Wed Sep 28 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5

  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication

• Tue Jun 28 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-4

  - Resolves: #2100783 - CVE-2021-46784 squid:4/squid: DoS when processing gopher
    server responses

• Wed Feb 09 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3

  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure

• Tue Jan 25 2022 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2

  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)

• Fri Jun 18 2021 Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-1

  - new version 4.15
  - Resolves: #1964384 - squid:4 rebase to 4.15