squid-2.6.STABLE21-7.AXS3
エラータID: AXSA:2014-518:01
Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2013-4115
Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.
CVE-2014-3609
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Please see below CVEs links for more information.
update packages.
Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."
N/A
SRPMS
- squid-2.6.STABLE21-7.AXS3.src.rpm
MD5: 921d67d13611692eff50184f445e819b
SHA-256: 8e60d7d91f705a034a910d946d84ffa062f213783cf164ab1e32931933aca8f1
Size: 1.44 MB
Asianux Server 3 for x86
- squid-2.6.STABLE21-7.AXS3.i386.rpm
MD5: 4ebdf5650b7a671ace122d06f1db0dfa
SHA-256: 5c8d7b96ac6c1557cdc3cb17707d13b0c8358db668052332ee441feb1c6b1b3e
Size: 1.27 MB
Asianux Server 3 for x86_64
- squid-2.6.STABLE21-7.AXS3.x86_64.rpm
MD5: 4a961c7aaad2a5b3337539e42dc3b9be
SHA-256: 156cae866b67bbd5311ca07b3bae355a9e661ccb5a1b4b2068deaf690b06de71
Size: 1.32 MB