squid34-3.4.14-9.AXS4.4
エラータID: AXSA:2017-1278:01
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2016-10002
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
Update packages.
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
N/A
SRPMS
- squid34-3.4.14-9.AXS4.4.src.rpm
MD5: f4b4d800d58ff4ad58353cc325011235
SHA-256: 0b16ae67bb9cc2dd2222523e88cdd5435d67ea95712eca5922d48d9c859b3a07
Size: 2.14 MB
Asianux Server 4 for x86
- squid34-3.4.14-9.AXS4.4.i686.rpm
MD5: 54b0fc9e9af79aa6a47199e4d9ea04ed
SHA-256: f3a1aa5dfc7418cce2d10a928d751b70661875aad8ddbbfd5de4cba1f56e5ab3
Size: 2.61 MB
Asianux Server 4 for x86_64
- squid34-3.4.14-9.AXS4.4.x86_64.rpm
MD5: cd4b2810dfe255ef9fb54bd719ece6a3
SHA-256: 6300e1518dbc486ef6d7c698cf1ed651112762d9f846dc096640794ac2574d52
Size: 2.63 MB