squid-3.5.20-2.el7.2
エラータID: AXSA:2017-1279:02
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2016-10002
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
Update packages.
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.23, 3.2.0.3 through 3.5.22, and 4.0.1 through 4.0.16 leads to client-specific Cookie data being leaked to other clients. Attack requests can easily be crafted by a client to probe a cache for this information.
N/A
SRPMS
- squid-3.5.20-2.el7.2.src.rpm
MD5: 99b6a1a4690e0dd6115a72e9cf0e8a61
SHA-256: f93c46cca3b79ad8179065f4241cc9df55c0965deaae43ea41a1bec3049023a6
Size: 2.29 MB
Asianux Server 7 for x86_64
- squid-3.5.20-2.el7.2.x86_64.rpm
MD5: 0de46148b27ae76927e263a989bde546
SHA-256: c07b55d60c84483e80df9b133fe54997fa876b56a3ad727bb02db6e51fd54270
Size: 3.05 MB - squid-migration-script-3.5.20-2.el7.2.x86_64.rpm
MD5: 4c5af24b71afa1eec104127204f36642
SHA-256: ffee9b75c68f181410ff3dccd8ea62359309423b9d71c0cddd8b98d7124ea053
Size: 46.71 kB
日本語