squid-3.1.10-1.AXS4.1
エラータID: AXSA:2011-730:02
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2011-3205
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.
Update packages.
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.
From Asianux Server 4 SP1.
SRPMS
- squid-3.1.10-1.AXS4.1.src.rpm
MD5: fce77ad060f0c641197c3df3704c74b7
SHA-256: 7fd8d300020d4a6e0a456e6bac411216b2ef3235e83a5c684c0d420a5b8ccf65
Size: 2.44 MB
Asianux Server 4 for x86
- squid-3.1.10-1.AXS4.1.i686.rpm
MD5: 8206885ab5f24e6cf0b4f6f0bc24e759
SHA-256: 5f624df2472fdf0886ed44a64c16282a5da3ec5e90b2d0bc9a9a3239d239e7db
Size: 1.73 MB
Asianux Server 4 for x86_64
- squid-3.1.10-1.AXS4.1.x86_64.rpm
MD5: ba7e4bfa29005775226eccc6da4622c6
SHA-256: 6a6fdadabbe62badfb80db7fc9a4f1785420e3362962074909ff6a27d50288cd
Size: 1.73 MB