Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora Core 2 2005-105 Moderate: Squid Buffer Overflow Warning

fedora
Calendar Grey February 1, 2005
Dist Fedora Esm H88
Updated caching proxy server on Fedora Core 2, Squid, resolved serious buffer overrun vulnerabilities to enhance overall functionality and robustness.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.

Summary

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

- Add more upstream patches, including fixes for

bz#146783 Correct handling of oversized reply headers

bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call

* Thu Jan 20 2005 Jay Fenlason 7:2.5.STABLE7-1.FC2

- Upgrade to 2.5.STABLE7 and 18 upstream patches.

- This includes fixes for CAN-2005-0094 CAN-2005-0095 CAN-2004-0096

and CAN-2004-0097. This closes bz#145543 and bz#141938

- This obsoletes Ulrich Drepper's -nonbl patch.

- Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged

accessable so that ntlm_auth will work.

This fixes bz#103726

* Mon Oct 18 2004 Jay Fenlason 7:2.5.STABLE6-3

- include patch from Ulrich Drepper to stop

problems with O_NONBLOCK. This closes #136049

2d9d0ffe41d21349bff23bf24bb676f7 SRPMS/squid-2.5.STABLE7-1.FC2.1.src.rpm

f49233765b306a7c62743a50e26d5d01 x86_64/squid-2.5.STABLE7-1.FC2.1.x86_64.rpm

4a6b39871c52d57635db8882273954a8 x86_64/debug/squid-debuginfo-2.5.STABLE7-1.FC2.1.x86_64.rpm

9168e1536b498db053ff69441a9e2107 i386/squid-2.5.STABLE7-1.FC2.1.i386.rpm

6d382f419ed3ae047d57eaf13f1223ad i386/debug/squid-debuginfo-2.5.STABLE7-1.FC2.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

Change Log

References

Update Instructions

Name: squid
Version: 2.5.STABLE7
Release: 1.FC2.1
Summary: The Squid proxy caching server.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here