squid-3.1.10-1.1.0.1.AXS4

エラータID: AXSA:2012-34:01

Release date: 
Thursday, January 19, 2012 - 12:57
Subject: 
squid-3.1.10-1.1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2011-4096
The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. squid-3.1.10-1.1.0.1.AXS4.src.rpm
    MD5: e08b26b30857b2f2f1b22bc4f381adc5
    SHA-256: d4e243501f57269cd1abbb8372e77bb13465bf52ff64071c3eeb7448014a5761
    Size: 2.44 MB

Asianux Server 4 for x86
  1. squid-3.1.10-1.1.0.1.AXS4.i686.rpm
    MD5: 75350a50524aa92a584d1a4da9639679
    SHA-256: 67c5755ad5afe8fb13592b08bc60df5a2fc8bf672e36faf6c9ce46ada9f3cdb0
    Size: 1.73 MB

Asianux Server 4 for x86_64
  1. squid-3.1.10-1.1.0.1.AXS4.x86_64.rpm
    MD5: 1b6d932518cc068fdb21c1761443e6fd
    SHA-256: 84c0ba299ce14174219a49dae2f5cedc828d9d27da5fa0253538d98d73896eab
    Size: 1.73 MB