Red Hat Security Advisory

RHSA-2008:0214

squid security update

Released 2008-04-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 squid-7:2.5.STABLE3-9.3E, squid-7:2.5.STABLE3-9.3E.i386
Red Hat Enterprise Linux (v. 5 server) squid-7:2.6.STABLE6-5.el5_1.3, squid-7:2.6.STABLE6-5.el5_1.3.i386, squid-7:2.6.STABLE6-5.el5_1.3.ia64 +1
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 squid-7:2.4.STABLE7-1.21as.12, squid-7:2.4.STABLE7-1.21as.12.i386, squid-7:2.4.STABLE7-1.21as.12.ia64
Red Hat Enterprise Linux AS version 3 squid-7:2.5.STABLE3-9.3E, squid-7:2.5.STABLE3-9.3E.i386, squid-7:2.5.STABLE3-9.3E.ia64 +1
Red Hat Enterprise Linux AS version 4 squid-7:2.5.STABLE14-1.4E.el4_6.2, squid-7:2.5.STABLE14-1.4E.el4_6.2.i386, squid-7:2.5.STABLE14-1.4E.el4_6.2.ia64 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squid-7:2.6.STABLE6-5.el5_1.3, squid-7:2.6.STABLE6-5.el5_1.3.i386
Red Hat Enterprise Linux Desktop version 4 squid-7:2.5.STABLE14-1.4E.el4_6.2, squid-7:2.5.STABLE14-1.4E.el4_6.2.i386
Red Hat Enterprise Linux ES version 2.1 squid-7:2.4.STABLE7-1.21as.12, squid-7:2.4.STABLE7-1.21as.12.i386
Red Hat Enterprise Linux ES version 3 squid-7:2.5.STABLE3-9.3E, squid-7:2.5.STABLE3-9.3E.i386, squid-7:2.5.STABLE3-9.3E.ia64
Red Hat Enterprise Linux ES version 4 squid-7:2.5.STABLE14-1.4E.el4_6.2, squid-7:2.5.STABLE14-1.4E.el4_6.2.i386, squid-7:2.5.STABLE14-1.4E.el4_6.2.ia64
Red Hat Enterprise Linux WS version 3 squid-7:2.5.STABLE3-9.3E, squid-7:2.5.STABLE3-9.3E.i386, squid-7:2.5.STABLE3-9.3E.ia64
Red Hat Enterprise Linux WS version 4 squid-7:2.5.STABLE14-1.4E.el4_6.2, squid-7:2.5.STABLE14-1.4E.el4_6.2.i386, squid-7:2.5.STABLE14-1.4E.el4_6.2.ia64
Red Hat Linux Advanced Workstation 2.1 squid-7:2.4.STABLE7-1.21as.12, squid-7:2.4.STABLE7-1.21as.12.ia64

Fixes 1 record

TI-2008-01545 CVE-2008-1612 · GHSA-qcwf-4hxx-vx9v

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a…

LOW 24

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02182 Published 2008-04-01 Fixed CWE-20