Package name
squid
Date
2010-09-22
Advisory ID
MDVSA-2010:187
Affected versions
2009.0 x86_64 , MES5 i586 , 2010.1 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , 2009.1 x86_64 , MES5 x86_64 , 2010.1 x86_64

Problem description

A vulnerability has been found and corrected in squid:

The string-comparison functions in String.cci in Squid 3.x before
3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a
denial of service (NULL pointer dereference and daemon crash) via a
crafted request (CVE-2010-3072).

Packages for 2008.0 and 2009.0 are provided as of the Extended
Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct this issue.

Updated packages

2009.0 x86_64

 da3a655ce40185905ee4a4a2e13c5f07  2009.0/x86_64/squid-3.0-22.4mdv2009.0.x86_64.rpm
 9ff19b9924ebaae5b01154e22a29da3d  2009.0/x86_64/squid-cachemgr-3.0-22.4mdv2009.0.x86_64.rpm 
 4bb14790230810c4baacacd4c0f42a74  2009.0/SRPMS/squid-3.0-22.4mdv2009.0.src.rpm

MES5 i586

 e20d4cc42d58560f3f584017b4dcbdbd  mes5/i586/squid-3.0-22.4mdvmes5.1.i586.rpm
 d00e43fc454df8f96037558183858efa  mes5/i586/squid-cachemgr-3.0-22.4mdvmes5.1.i586.rpm 
 7f59d47bdeafa6b214156bd5c05a7434  mes5/SRPMS/squid-3.0-22.4mdvmes5.1.src.rpm

2010.1 i586

 cb704f8f77cf45864616a53380b67407  2010.1/i586/squid-3.1-14.1mdv2010.1.i586.rpm
 70f434103d5aad68840a3e0840c88a5b  2010.1/i586/squid-cachemgr-3.1-14.1mdv2010.1.i586.rpm 
 b5542ebf1f680c827bfb5d892d2126c2  2010.1/SRPMS/squid-3.1-14.1mdv2010.1.src.rpm

2010.0 x86_64

 2c25361fc48aa14c03def8f3df6a3e36  2010.0/x86_64/squid-3.0-22.4mdv2010.0.x86_64.rpm
 4f48b44c06ccda8ce392a8d7c14156e3  2010.0/x86_64/squid-cachemgr-3.0-22.4mdv2010.0.x86_64.rpm 
 d8ec42428df3b93be59c4548f029435c  2010.0/SRPMS/squid-3.0-22.4mdv2010.0.src.rpm

2010.0 i586

 c2b0fc893c78169ea1de1d0e681741fb  2010.0/i586/squid-3.0-22.4mdv2010.0.i586.rpm
 013877c3f2930638a85ef21225aeb3a7  2010.0/i586/squid-cachemgr-3.0-22.4mdv2010.0.i586.rpm 
 d8ec42428df3b93be59c4548f029435c  2010.0/SRPMS/squid-3.0-22.4mdv2010.0.src.rpm

2009.1 i586

 845a48e585b33f26553afdafdb79fed2  2009.1/i586/squid-3.0-22.4mdv2009.1.i586.rpm
 5887a7ebbd92b1b6129584e3193b8916  2009.1/i586/squid-cachemgr-3.0-22.4mdv2009.1.i586.rpm 
 4161f1ac082be3c97a33f26e5465e8f5  2009.1/SRPMS/squid-3.0-22.4mdv2009.1.src.rpm

2009.0 i586

 1639b62ea33f02fd7279621f4b5f1348  2009.0/i586/squid-3.0-22.4mdv2009.0.i586.rpm
 be2fb2e56e983f0240f32df7c63faff5  2009.0/i586/squid-cachemgr-3.0-22.4mdv2009.0.i586.rpm 
 4bb14790230810c4baacacd4c0f42a74  2009.0/SRPMS/squid-3.0-22.4mdv2009.0.src.rpm

2009.1 x86_64

 e09fec0589e8f8fe4ecee65e3b56a52f  2009.1/x86_64/squid-3.0-22.4mdv2009.1.x86_64.rpm
 58dad1d858f26989947316da944c412e  2009.1/x86_64/squid-cachemgr-3.0-22.4mdv2009.1.x86_64.rpm 
 4161f1ac082be3c97a33f26e5465e8f5  2009.1/SRPMS/squid-3.0-22.4mdv2009.1.src.rpm

MES5 x86_64

 8233892d48af6680a81ae27fe774071f  mes5/x86_64/squid-3.0-22.4mdvmes5.1.x86_64.rpm
 cc8b47ad54fe11e0d62addc394be70b2  mes5/x86_64/squid-cachemgr-3.0-22.4mdvmes5.1.x86_64.rpm 
 7f59d47bdeafa6b214156bd5c05a7434  mes5/SRPMS/squid-3.0-22.4mdvmes5.1.src.rpm

2010.1 x86_64

 5be0ea66917bd41c9f1b6db67bb2890a  2010.1/x86_64/squid-3.1-14.1mdv2010.1.x86_64.rpm
 36f104d772da713669eaf4b74b26d75b  2010.1/x86_64/squid-cachemgr-3.1-14.1mdv2010.1.x86_64.rpm 
 b5542ebf1f680c827bfb5d892d2126c2  2010.1/SRPMS/squid-3.1-14.1mdv2010.1.src.rpm

References