Red Hat Security AdvisoryRHSA-2007:1130
squid security update
Released 2007-12-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 squid-7:2.5.STABLE3-8.3E, squid-7:2.5.STABLE3-8.3E.i386
- Red Hat Enterprise Linux (v. 5 server) squid-7:2.6.STABLE6-5.el5_1.2, squid-7:2.6.STABLE6-5.el5_1.2.i386, squid-7:2.6.STABLE6-5.el5_1.2.ia64 +1
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 squid-7:2.4.STABLE7-1.21as.11, squid-7:2.4.STABLE7-1.21as.11.i386, squid-7:2.4.STABLE7-1.21as.11.ia64
- Red Hat Enterprise Linux AS version 3 squid-7:2.5.STABLE3-8.3E, squid-7:2.5.STABLE3-8.3E.i386, squid-7:2.5.STABLE3-8.3E.ia64 +1
- Red Hat Enterprise Linux AS version 4 squid-7:2.5.STABLE14-1.4E.el4_6.1, squid-7:2.5.STABLE14-1.4E.el4_6.1.i386, squid-7:2.5.STABLE14-1.4E.el4_6.1.ia64 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squid-7:2.6.STABLE6-5.el5_1.2, squid-7:2.6.STABLE6-5.el5_1.2.i386
- Red Hat Enterprise Linux Desktop version 4 squid-7:2.5.STABLE14-1.4E.el4_6.1, squid-7:2.5.STABLE14-1.4E.el4_6.1.i386
- Red Hat Enterprise Linux ES version 2.1 squid-7:2.4.STABLE7-1.21as.11, squid-7:2.4.STABLE7-1.21as.11.i386
- Red Hat Enterprise Linux ES version 3 squid-7:2.5.STABLE3-8.3E, squid-7:2.5.STABLE3-8.3E.i386, squid-7:2.5.STABLE3-8.3E.ia64
- Red Hat Enterprise Linux ES version 4 squid-7:2.5.STABLE14-1.4E.el4_6.1, squid-7:2.5.STABLE14-1.4E.el4_6.1.i386, squid-7:2.5.STABLE14-1.4E.el4_6.1.ia64
- Red Hat Enterprise Linux WS version 3 squid-7:2.5.STABLE3-8.3E, squid-7:2.5.STABLE3-8.3E.i386, squid-7:2.5.STABLE3-8.3E.ia64
- Red Hat Enterprise Linux WS version 4 squid-7:2.5.STABLE14-1.4E.el4_6.1, squid-7:2.5.STABLE14-1.4E.el4_6.1.i386, squid-7:2.5.STABLE14-1.4E.el4_6.1.ia64
- Red Hat Linux Advanced Workstation 2.1 squid-7:2.4.STABLE7-1.21as.11, squid-7:2.4.STABLE7-1.21as.11.ia64
Fixes 1 record
Priority MEDIUM 45
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memor…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.26659 · Published 2007-12-04 · Fixed CWE-20
