Amazon Linux 1 Security Advisory: ALAS-2023-1872
Advisory Release Date: 2023-10-25 21:15 Pacific
Advisory Updated Date: 2023-11-06 21:16 Pacific
Due to a buffer overflow bug Squid is vulnerable to a Denial of Service attack against HTTP Digest Authentication (CVE-2023-46847)
Affected Packages:
squid
Issue Correction:
Run yum update squid to update your system.
i686:
squid-3.5.20-17.50.amzn1.i686
squid-debuginfo-3.5.20-17.50.amzn1.i686
squid-migration-script-3.5.20-17.50.amzn1.i686
src:
squid-3.5.20-17.50.amzn1.src
x86_64:
squid-3.5.20-17.50.amzn1.x86_64
squid-debuginfo-3.5.20-17.50.amzn1.x86_64
squid-migration-script-3.5.20-17.50.amzn1.x86_64