Fedora: 2022-471 Critical: Squid DoS Fix from Bad DNS Response

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

This update fixes

CAN-2005-0446 Squid DoS from bad DNS response

- New upstream version, includes fix for bz#148884 CAN-2005-0446

- Reorganize spec file to put local patches after upstream ones.

197d46d4f118d9425d8156baafcd316c SRPMS/squid-2.5.STABLE8-1.FC2.1.src.rpm

8117b066c52898f34e7290bb88850b18 x86_64/squid-2.5.STABLE8-1.FC2.1.x86_64.rpm

e38f7f8d6b9eeaae077fbcfa2657a6dd x86_64/debug/squid-debuginfo-2.5.STABLE8-1.FC2.1.x86_64.rpm

af811c1431ebcc3b4e5fb329e656a839 i386/squid-2.5.STABLE8-1.FC2.1.i386.rpm

76364c80e7280f2116878ba67270a194 i386/debug/squid-debuginfo-2.5.STABLE8-1.FC2.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com