Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian: DSA 751-1 Critical: Squid IP Spoofing Remote Threat

The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache.. - --------------------------------------------------------------------------Debian Security Advisory DSA 751-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : squid Vulnerability : IP spoofing Problem-Type : remote Debian-specific: no CVE ID : CAN-2005-1519 Debian Bug : 309504 The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache. When the DNS client UDP port (assigned by the operating system at startup) is unfiltered and the network is not protected from IP spoofing, malicious users can spoof DNS lookups which could result in users being redirected to arbitrary web sites. For the old stable distribution (woody) this problem has been fixed in version 2.4.6-2woody9. For the stable distribution (sarge) this problem has already been fixed in version squid-2.5.9-9. For the unstable distribution (sid) this problem has already been fixed in version squid-2.5.9-9. We recommend that you upgrade your squid package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 612 3fa0175264bf3047e24cdfedb998a562 Size/MD5 checksum: 2519838f9ff155f1aa9e6dd4eb7cedd1bd3d72 Size/MD5 checksum: 1081920 59ce2c58da189626d77e27b9702ca228 Alpha architecture: Size/MD5 checksum: 816730 5f3be8d3c78aa606ad7c74470d144b8f Size/MD5 checksum: 75804 583772834d2039e981a3133a8b93fc84 Size/MD5 checksum: 60560 5aae3b527887250e15c4e320dc07b59e ARM architecture: Size/MD5 checksum: 726818 a12c09415f9296b0294a72da513da540 Size/MD5 checksum: 73588 c257ec52c12616cbab2245d480ae182e Size/MD5 checksum: 58898 0cb67566734d8726bc9f7d7f1e3fd282 Intel IA-32 architecture: Size/MD5 checksum: 685864 4df5913de4867724e1ea0f8b787a6d59 Size/MD5 checksum: 73314 57f70ab976fa90fdc39b744502eae489 Size/MD5 checksum: 58484 5ebcce4092143854b38a7d3db1de390d Intel IA-64 architecture: Size/MD5 checksum: 954776 ed63a873903c829292ae5cf4cc8e918b Size/MD5 checksum: 79640 23c6697f0c86bda9d67e694fd4ab4804 Size/MD5 checksum: 63236 007bf8916f2eaac7b4808a48035c49f0 HP Precision architecture: Size/MD5 checksum: 780136 66f816b103f22db0da3bc9b239240ee4 Size/MD5 checksum: 75026 47bc59533a41ecbcc62990d15b5cb59c Size/MD5 checksum: 60044 e2e1d5a45ebde9b4e34c9257976de433 Motorola 680x0 architecture: Size/MD5 checksum: 667204 e92038eef385524a8fbcd9c2ffa0204b Size/MD5 checksum: 72938 2d4f77cdbb6c0c2018171edd31b6b3d3 Size/MD5 checksum: 58142 7467c67935c89a73fdcffeef2a93d604 Big endian MIPS architecture: Size/MD5 checksum: 766022 988b4b95bf2d61913fd17104372e1ce9 Size/MD5 checksum: 74534 5e0c60406c3b13acb984bf42a2366fda Size/MD5 checksum: 59186 d368ea558629d434bb15b4325ff55b77 Little endian MIPS architecture: Size/MD5 checksum: 766462 d1591d9142a2496bb84c7045ad1c8871 Size/MD5 checksum: 74614 6fd8434ffa976cca49ac825758e841aa Size/MD5checksum: 59298 d8f858a9ddac2fb793dbc44501b7f448 PowerPC architecture: Size/MD5 checksum: 723618 d65ddc3343eb1e3db573fd2608952f53 Size/MD5 checksum: 73576 be7b21a20cee04b344467b0fc5d0f6e0 Size/MD5 checksum: 58790 884fd1a33da05e5ae411b891ae1e35d8 IBM S/390 architecture: Size/MD5 checksum: 712898 cb4bfc96d86fa232c442ceeaebf0771d Size/MD5 checksum: 73912 895192f5f60927d449d6178f19d4674a Size/MD5 checksum: 59342 0ef0505c7586d62265a4211571c10f8b Sun Sparc architecture: Size/MD5 checksum: 725260 ef81727ef3614993f8bb49c463e159d1 Size/MD5 checksum: 76210 a4f3fb847e2ae897c678c1a7e1d87fa8 Size/MD5 checksum: 61226 4e4457bcc2272b2d226ac65d07f3ad36 These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Learn effective mitigation strategies for IP spoofing in Squid package, enhancing DNS security and protecting your network from potential attacks. Squid Package Update, Debian Security Patch, DNS Spoofing Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 11, 2005 Critical Debian
98

Red Hat Linux 7.2: RHSA-2001:113-03 Critical: Squid FTP DoS

New squid packages are available that fix a potential DoS in Squid's FTPhandling code. It is recommened that squid users update to the fixedpackages.. ` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New squid packages available to fix FTP-based DoS Advisory ID: RHSA-2001:113-03 Issue date: 2001-09-25 Updated on: 2001-10-16 Product: Red Hat Linux Keywords: squid FTP DoS Cross references: Obsoletes: --------------------------------------------------------------------- 1. Topic: New squid packages are available that fix a potential DoS in Squid's FTP handling code. It is recommened that squid users update to the fixed packages. The packages for Red Hat Linux 6.2 also fix the problem described in RHSA-2001:097-04; it was later discovered that Red Hat Linux 6.2 is vulnerable to the same problem in accelerator-only mode. 2001-10-22: Packages are now available for Red Hat Linux 7.2. 2. Relevant releases/architectures: Red Hat Linux 6.2 - alpha, i386, sparc Red Hat Linux 7.0 - alpha, i386 Red Hat Linux 7.1 - alpha, i386, ia64 Red Hat Linux 7.2 - i386 3. Problem description: Certain FTP requests could cause the Squid daemon to abort, making it unavailable for a period of seconds. If enough of these requests are sent in a short period of time, the Squid daemon will not be restarted. Thanks go to Vladimir Ivaschenko for bringing this to our attention, and to Henrik Nordstrom and the Squid team for providing a fix. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also usewildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 53906 - Squid allows all proxy requests in accelerator mode 6. RPMs required: Red Hat Linux 6.2: SRPMS: alpha: i386: sparc: Red Hat Linux 7.0: SRPMS: alpha: i386: Red Hat Linux 7.1: SRPMS: alpha: i386: ia64: Red Hat Linux 7.2: SRPMS: i386: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 92bf7d39e574dad6e6952b6b89851fe5 6.2/en/os/SRPMS/squid-2.3.STABLE4-10.6.2.src.rpm e693299406aba9b573354fe29e998a29 6.2/en/os/alpha/squid-2.3.STABLE4-10.6.2.alpha.rpm ca6952e0be177b25d0e90778ab456f6b 6.2/en/os/i386/squid-2.3.STABLE4-10.6.2.i386.rpm 505fbeeaaf873f52a51e8a0a3e5562ae 6.2/en/os/sparc/squid-2.3.STABLE4-10.6.2.sparc.rpm 2006fdfdc57bc09337be92a04583e00d 7.0/en/os/SRPMS/squid-2.3.STABLE4-10.7.0.src.rpm 0784ce226770a50c4f13640b6cc7d01e 7.0/en/os/alpha/squid-2.3.STABLE4-10.7.0.alpha.rpm a8d303d2743c0703d3bb2c6502488824 7.0/en/os/i386/squid-2.3.STABLE4-10.7.0.i386.rpm 08a518df230a1f9cf17ecbf2a273a4b8 7.1/en/os/SRPMS/squid-2.3.STABLE4-10.7.1.src.rpm fe4e72902f8aaf5dec0085c91b0b0e0d 7.1/en/os/alpha/squid-2.3.STABLE4-10.7.1.alpha.rpm c7e2f184cffdd911411aec7908c937d3 7.1/en/os/i386/squid-2.3.STABLE4-10.7.1.i386.rpm 5883320b3d07b2861122e631f59f8b24 7.1/en/os/ia64/squid-2.3.STABLE4-10.7.1.ia64.rpm 1f87ef13481f99b1d4a218f2436b24c1 7.2/en/os/SRPMS/squid-2.4.STABLE1-6.src.rpm b5f0ca849fcef20c0c05b2bea268520e 7.2/en/os/i386/squid-2.4.STABLE1-6.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: About You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Copyright(c) 2000, 2001 Red Hat, Inc. `. New squid packages fix critical FTP-based DoS issue in Red Hat 7.2. Users must update packages to ensure system stability.. Squid Package Update, Red Hat Advisory, FTP DoS Fix, System Updates, Network Security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 22, 2001 Critical Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here