Fedora 10: 2009-1526 Critical Vulnerability in Squid DoS Service Issue

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

* Thu Feb 5 2009 Jonathan Steffan - 7:3.0.STABLE13-1

- upgrade to latest upstream

* Thu Jan 29 2009 Henrik Nordstrom - 7:3.0.STABLE12-1

- upgrade to latest upstream

* Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-3

- actually include the upstream bugfixes in the build

* Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-2

- upstream bugfixes for cache corruption and access.log response size errors

[ 1 ] Bug #484246 - CVE-2009-0478 Squid denial of service flaw

https://bugzilla.redhat.com/show_bug.cgi?id=484246

su -c 'yum update squid' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/