Amazon Linux 1 (EOL) Security Advisory: ALAS-2023-1872
Advisory Released Date: 2023-10-28
Advisory Updated Date: 2023-11-06
Severity:
Critical
Issue Overview:
Due to a buffer overflow bug Squid is vulnerable to a Denial of Service attack against HTTP Digest Authentication (CVE-2023-46847)
Affected Packages:
squid
Issue Correction:
Run yum update squid to update your system.
New Packages:
i686:
squid-3.5.20-17.50.amzn1.i686
squid-debuginfo-3.5.20-17.50.amzn1.i686
squid-migration-script-3.5.20-17.50.amzn1.i686
src:
squid-3.5.20-17.50.amzn1.src
x86_64:
squid-3.5.20-17.50.amzn1.x86_64
squid-debuginfo-3.5.20-17.50.amzn1.x86_64
squid-migration-script-3.5.20-17.50.amzn1.x86_64