Red Hat Security Advisory: squid:4 security, bug fix, and enhancement update
squid: Improper input validation in request allows for proxy manipulation squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash squid: Improper input validation in URI processor squid: Improper access restriction in url_regex may lead to security bypass squid: Heap overflow issue in URN processing squid: Information Disclosure issue in FTP Gateway squid: Out of bounds read in Proxy-Authorization header causes DoS squid: Denial of service in cachemgr.cgi squid: Buffer overflow in URI processor squid: Cross-Site Request Forgery issue in HTTP Request processing squid: HTTP Request Splitting issue in HTTP message processing squid: Information Disclosure issue in HTTP Digest Authentication squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour squid: Improper input validation issues in HTTP Request processing squid: Buffer overflow in reverse-proxy configurations squid: DoS in TLS handshake squid: Request smuggling and poisoning attack against the HTTP cache squid: Improper input validation could result in a DoS
cpe:/a:redhat:enterprise_linux:8::appstream