Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora: FEDORA-2006-789 High: Apache Security Patch for Remote DoS

fedora
Calendar Grey October 13, 2004
Dist Fedora Esm H88
Patch for Remote DoS in Fedora's Squid Implementation. The release integrates essential backport aimed at enhancing security measures.
Backport fix for CAN-2004-0918 (Remote Denial of Service attack)

Summary

Squid is a high-performance proxy caching server for Web clients,

supporting FTP, gopher, and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

* Tue Oct 12 2004 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-4.fc2.2

- Backport fix for CAN-2004-0918 (Remote Denial of Service attack)

This update can be downloaded from:

b186266417cde4ae107590c2a57529e3 SRPMS/squid-2.5.STABLE5-4.fc2.2.src.rpm

4ec79efd0c0adc7374814f60fefea25b x86_64/squid-2.5.STABLE5-4.fc2.2.x86_64.rpm

40c4b0a65a0a9696bb24b5c3a9fbad3d x86_64/debug/squid-debuginfo-2.5.STABLE5-4.fc2.2.x86_64.rpm

be53dc7d7978aa246739670e1f994402 i386/squid-2.5.STABLE5-4.fc2.2.i386.rpm

7f9c55b03369c0985fab4c56bab719f0 i386/debug/squid-debuginfo-2.5.STABLE5-4.fc2.2.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

--

fedora-announce-list mailing list

fedora-announce-list@redhat.com

fedora-announce-list Info Page

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora Core 2
Name: squid
Version: 2.5.STABLE5
Release: 4.fc2.2
Summary: The Squid proxy caching server.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here