squid-3.1.10-1.AXS4
エラータID: AXSA:2011-209:01
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2010-3072
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Fixed bugs:
- Fixed a memory leak that caused ctx: enter level messages to be logged to /var/log/squid/cache.log.
- Upgraded Squid to upstream version 3.1.10, adding support for the Google Instant service as well as various code improvements.
Update packages.
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
N/A
SRPMS
- squid-3.1.10-1.AXS4.src.rpm
MD5: a66d4c9653f88907bbee970e4ed7c94f
SHA-256: 2ad7ab8b5da14e264a065da3f0cf290e00f17b614800b2afc331ce9d7c04b1b0
Size: 2.43 MB
Asianux Server 4 for x86_64
- squid-3.1.10-1.AXS4.x86_64.rpm
MD5: 69e23003e32ea5fd44398aada374ff1e
SHA-256: d6b5c8ba17bc17881926524a468cd5da855350735ce02a0620202b1062cdc6e8
Size: 1.73 MB