squid-3.1.10-1.AXS4.1

エラータID: AXSA:2011-730:02

リリース日: 
2011/12/29 Thursday - 11:11
題名: 
squid-3.1.10-1.AXS4.1
影響のあるチャネル: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Security issues fixed with this release:
CVE-2011-3205
Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in Squid 3.0 before 3.0.STABLE26, 3.1 before 3.1.15, and 3.2 before 3.2.0.11 allows remote Gopher servers to cause a denial of service (memory corruption and daemon restart) or possibly have unspecified other impact via a long line in a response. NOTE: This issue exists because of a CVE-2005-0094 regression.

解決策: 

Update packages.

追加情報: 

From Asianux Server 4 SP1.

ダウンロード: 

SRPMS
  1. squid-3.1.10-1.AXS4.1.src.rpm
    MD5: fce77ad060f0c641197c3df3704c74b7
    SHA-256: 7fd8d300020d4a6e0a456e6bac411216b2ef3235e83a5c684c0d420a5b8ccf65
    Size: 2.44 MB

Asianux Server 4 for x86
  1. squid-3.1.10-1.AXS4.1.i686.rpm
    MD5: 8206885ab5f24e6cf0b4f6f0bc24e759
    SHA-256: 5f624df2472fdf0886ed44a64c16282a5da3ec5e90b2d0bc9a9a3239d239e7db
    Size: 1.73 MB

Asianux Server 4 for x86_64
  1. squid-3.1.10-1.AXS4.1.x86_64.rpm
    MD5: ba7e4bfa29005775226eccc6da4622c6
    SHA-256: 6a6fdadabbe62badfb80db7fc9a4f1785420e3362962074909ff6a27d50288cd
    Size: 1.73 MB