Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora Core: 2006-205 Critical Alert for Apache mod_ssl DoS Issue

fedora
Calendar Grey February 22, 2005
Dist Fedora Esm H88
A patch addressing CAN-2005-0446 in Squid on Fedora Core 3 mitigates denial-of-service issues caused by malformed DNS replies effectively.
This update fixes CAN-2005-0446 Squid DoS from bad DNS response

Summary

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

This update fixes

CAN-2005-0446 Squid DoS from bad DNS response

- New upstream version, includes fix for bz#148884 CAN-2005-0446

- Reorganize spec file to put local patches after upstream ones.

cbf4ef3e2a9a5c6dbf9083f8f027c1f5 SRPMS/squid-2.5.STABLE8-1.FC3.1.src.rpm

dffaa4064b557bd8e7d1291d81c16fdd x86_64/squid-2.5.STABLE8-1.FC3.1.x86_64.rpm

858c915a58b3b5e352a2934fad633ab1 x86_64/debug/squid-debuginfo-2.5.STABLE8-1.FC3.1.x86_64.rpm

72a1472887ee86f5a4582543b2a59aa5 i386/squid-2.5.STABLE8-1.FC3.1.i386.rpm

8ca09a86e9d64bdfd5ed0fe46f2d06db i386/debug/squid-debuginfo-2.5.STABLE8-1.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Name: squid
Version: 2.5.STABLE8
Release: 1.FC3.1
Summary: The Squid proxy caching server.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here