LWN.net Logo

Fedora alert FEDORA-2010-14222 (squid)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 13 Update: squid-3.1.8-1.fc13
Date:  Wed, 15 Sep 2010 22:28:32 +0000
Message-ID:  <20100915222832.E09F010F877@bastion02.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-14222 2010-09-08 01:59:10 -------------------------------------------------------------------------------- Name : squid Product : Fedora 13 Version : 3.1.8 Release : 1.fc13 URL : http://www.squid-cache.org Summary : The Squid proxy caching server Description : Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests. Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools. -------------------------------------------------------------------------------- Update Information: * Upstream 3.1.8 bugfix release fixing SQUID-2010:3 denial of service issue. * Drop -fPIE compiler flag which resulted in inconsistent build and SELinux complaints. -------------------------------------------------------------------------------- ChangeLog: * Sun Sep 5 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.8-1 - Bug #630445: SQUID-2010:3 Denial of service issue * Tue Aug 24 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7: 3.1.7-1 - Upstream 3.1.7 bugfix release * Fri Aug 20 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.6-1 - Upstream 3.1.6 bugfix release - Build with system libtool-ltdl * Thu Jul 15 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2 - Upstream 3.1.5 bugfix release - Upstream patch for Bug #614665: Squid crashes with ident auth - Upstream patches for various memory leaks * Mon May 31 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-2 - Correct case-insensitiveness in HTTP list header parsing * Sun May 30 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1 - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory management, follow_x_forwarded_for, and stability fixes * Fri May 14 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2 - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled - Various IPv6 related issues fixed, making tcp_outgoing_address behave as expected and no commResetFD warnings when using tproxy setups. * Sun May 2 2010 Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-1 - Update to 3.1.3 Upstream bugfix release, fixing WCCPv1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #630444 - Squid: Denial of service due internal error in string handling (SQUID-2010:3) https://bugzilla.redhat.com/show_bug.cgi?id=630444 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update squid' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds