sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] SECURITY UPDATE for http/squid

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] SECURITY UPDATE for http/squid
Date: Thu, 17 Jun 2004 10:05:01 -0700

read the history notice below.

The following files are attached for spell http/squid:
BUILD
DEPENDS
DETAILS
HISTORY
POST_REMOVE
TRIGGERS
init.d/
init.d/squid
services

==== //sgl/devel/grimoire/http/squid/HISTORY#21 -
/home/seth/sourcemage/devel/http/squid/HISTORY ====
0a1,5
> 2004-06-17 Seth Woolley <seth AT tautology.org>
> * BUILD, DETAILS: added ntlm not enough bounds checking buffer
> overflow remote exploit patch SECURITY FIX! (our spell enabled
> NTLM by default so all installs are vulnerable!)
>

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.9961.tar.bz2
Description: Binary data

Attachment: pgpYMm7EEuS6_.pgp
Description: PGP signature

[SM-Security] SECURITY UPDATE for http/squid, Seth Alan Woolley, 06/17/2004