squid-3.1.10-1.AXS4

エラータID: AXSA:2011-209:01

リリース日: 
2011/05/30 Monday - 15:33
題名: 
squid-3.1.10-1.AXS4
影響のあるチャネル: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2010-3072
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Fixed bugs:
- Fixed a memory leak that caused ctx: enter level messages to be logged to /var/log/squid/cache.log.
- Upgraded Squid to upstream version 3.1.10, adding support for the Google Instant service as well as various code improvements.

解決策: 

Update packages.

追加情報: 

N/A

ダウンロード: 

SRPMS
  1. squid-3.1.10-1.AXS4.src.rpm
    MD5: a66d4c9653f88907bbee970e4ed7c94f
    SHA-256: 2ad7ab8b5da14e264a065da3f0cf290e00f17b614800b2afc331ce9d7c04b1b0
    Size: 2.43 MB

Asianux Server 4 for x86_64
  1. squid-3.1.10-1.AXS4.x86_64.rpm
    MD5: 69e23003e32ea5fd44398aada374ff1e
    SHA-256: d6b5c8ba17bc17881926524a468cd5da855350735ce02a0620202b1062cdc6e8
    Size: 1.73 MB