Linux · Security advisory · November 4, 2020

RHSA-2020:4743: Security update for 3 packages

RHSA-2020:4743, released November 4, 2020, fixes 18 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
18
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7179
99th percentile

Priority of the 18 CVEs

Patch now 0 Urgent 0 High 14 Routine 4

Fixed package versions

ProductReleaseFixed in
libecapRHEL 80:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-develRHEL 80:1.0.1-2.module+el8.1.0+4044+36416a77
squidRHEL 87:4.11-3.module+el8.3.0+7851+7808b5f9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-8450 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.3 0.7179 None reported
High CVE-2019-18679 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.5 0.4098 None reported
High CVE-2019-12526 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 9.8 0.2025 None reported
High CVE-2019-12854 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.5 0.1171 None reported
High CVE-2019-12528 squid-cgi: An issue was discovered in Squid before 4.10 7.5 0.1049 None reported
High CVE-2019-18676 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.5 0.0918 None reported
High CVE-2020-8449 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.5 0.0831 None reported
High CVE-2020-15049 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 8.8 0.0571 None reported
High CVE-2020-24606 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.5 0.0496 None reported
High CVE-2019-12523 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 9.1 0.0430 None reported
High CVE-2019-18677 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.4 0.0393 None reported
High CVE-2019-12520 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.5 0.0392 None reported
High CVE-2019-12524 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 9.8 0.0386 None reported
High CVE-2020-14058 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 7.7 0.0254 None reported
Routine CVE-2019-12529 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 5.9 0.0809 None reported
Routine CVE-2019-18678 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 6.8 0.0620 None reported
Routine CVE-2019-12521 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 5.9 0.0591 None reported
Routine CVE-2019-18860 libecap: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. The... 6.1 0.0500 None reported
Showing 1 to 18 of 18 1