ALAS-2023-1872


Amazon Linux 1 Security Advisory: ALAS-2023-1872
Advisory Release Date: 2023-10-25 21:15 Pacific
Advisory Updated Date: 2023-11-06 21:16 Pacific
Severity: Critical

Issue Overview:

Due to a buffer overflow bug Squid is vulnerable to a Denial of Service attack against HTTP Digest Authentication (CVE-2023-46847)


Affected Packages:

squid


Issue Correction:
Run yum update squid to update your system.

New Packages:
i686:
    squid-3.5.20-17.50.amzn1.i686
    squid-debuginfo-3.5.20-17.50.amzn1.i686
    squid-migration-script-3.5.20-17.50.amzn1.i686

src:
    squid-3.5.20-17.50.amzn1.src

x86_64:
    squid-3.5.20-17.50.amzn1.x86_64
    squid-debuginfo-3.5.20-17.50.amzn1.x86_64
    squid-migration-script-3.5.20-17.50.amzn1.x86_64