Paketname
squid
Datum
2009-08-08
Advisory ID
MDVSA-2009:161-1
Betroffene Versionen
2009.0 x86_64 , MES5 i586 , 2009.1 i586 , 2009.0 i586 , 2008.1 i586 , 2008.1 x86_64 , 2009.1 x86_64 , MES5 x86_64

Problembeschreibung

Multiple vulnerabilities has been found and corrected in squid:

Due to incorrect buffer limits and related bound checks Squid is
vulnerable to a denial of service attack when processing specially
crafted requests or responses (CVE-2009-2621).

Due to incorrect data validation Squid is vulnerable to a denial
of service attack when processing specially crafted responses
(CVE-2009-2622).

This update provides fixes for these vulnerabilities.

Update:

Additional upstream security patches were applied:

Debug warnings fills up the logs.

Upstream Bug 2728: regression: assertion failed: http.cc:705: !eof

Aktualisierte Pakete

2009.0 x86_64

 c31d8b18943d5991057d60f85308b295  2009.0/x86_64/squid-3.0-8.3mdv2009.0.x86_64.rpm
 60eb016ab3f3118bb1ac3815e15f611a  2009.0/x86_64/squid-cachemgr-3.0-8.3mdv2009.0.x86_64.rpm 
 da26efb976c48dc47b5c0ab4a31cf770  2009.0/SRPMS/squid-3.0-8.3mdv2009.0.src.rpm

MES5 i586

 6f3488ad1431be0621932d42ae93f856  mes5/i586/squid-3.0-8.3mdvmes5.i586.rpm
 f7132b51d8e0c2c79c2e64cabbc1f928  mes5/i586/squid-cachemgr-3.0-8.3mdvmes5.i586.rpm 
 d7051be1a4f5f8436cd0ec7334fbbea6  mes5/SRPMS/squid-3.0-8.3mdvmes5.src.rpm

2009.1 i586

 d2a688018c6a12935defd2e581e67f78  2009.1/i586/squid-3.0-14.2mdv2009.1.i586.rpm
 b89fdc36becd736a073fa90e3ce7bed4  2009.1/i586/squid-cachemgr-3.0-14.2mdv2009.1.i586.rpm 
 1ab07e46b21e1fba49ad274ec70d9db5  2009.1/SRPMS/squid-3.0-14.2mdv2009.1.src.rpm

2009.0 i586

 0878bbf4a92762e656815c92126f32b9  2009.0/i586/squid-3.0-8.3mdv2009.0.i586.rpm
 430fd4dbe28591babbbda547e3e7cdd3  2009.0/i586/squid-cachemgr-3.0-8.3mdv2009.0.i586.rpm 
 da26efb976c48dc47b5c0ab4a31cf770  2009.0/SRPMS/squid-3.0-8.3mdv2009.0.src.rpm

2008.1 i586

 70e3f4286e5321fea8b36736fc932bf2  2008.1/i586/squid-3.0-1.3mdv2008.1.i586.rpm
 187124f52e6dc2fce724f0081e5fc4b6  2008.1/i586/squid-cachemgr-3.0-1.3mdv2008.1.i586.rpm 
 ffb19d5dc3c08beef7ae8dd8f0d27e62  2008.1/SRPMS/squid-3.0-1.3mdv2008.1.src.rpm

2008.1 x86_64

 61d27544a43ee767f8f726844145c3b8  2008.1/x86_64/squid-3.0-1.3mdv2008.1.x86_64.rpm
 c68ae2af5f62788cf104ac9655903212  2008.1/x86_64/squid-cachemgr-3.0-1.3mdv2008.1.x86_64.rpm 
 ffb19d5dc3c08beef7ae8dd8f0d27e62  2008.1/SRPMS/squid-3.0-1.3mdv2008.1.src.rpm

2009.1 x86_64

 d43edb69f721c30151607c29ef72cf92  2009.1/x86_64/squid-3.0-14.2mdv2009.1.x86_64.rpm
 12fa9bb740446332319dd1f3157a49fa  2009.1/x86_64/squid-cachemgr-3.0-14.2mdv2009.1.x86_64.rpm 
 1ab07e46b21e1fba49ad274ec70d9db5  2009.1/SRPMS/squid-3.0-14.2mdv2009.1.src.rpm

MES5 x86_64

 3b095a4e24704cf6c63f9a180dce6121  mes5/x86_64/squid-3.0-8.3mdvmes5.x86_64.rpm
 042576d27f54f4d0074db6aa5725d2af  mes5/x86_64/squid-cachemgr-3.0-8.3mdvmes5.x86_64.rpm 
 d7051be1a4f5f8436cd0ec7334fbbea6  mes5/SRPMS/squid-3.0-8.3mdvmes5.src.rpm

Referenzen