Skip to Content.
Sympa Menu

sm-security - [SM-Security] SECURITY UPDATE for http/squid

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] SECURITY UPDATE for http/squid
  • Date: Thu, 17 Jun 2004 10:05:01 -0700

read the history notice below.

The following files are attached for spell http/squid:
BUILD
DEPENDS
DETAILS
HISTORY
POST_REMOVE
TRIGGERS
init.d/
init.d/squid
services

==== //sgl/devel/grimoire/http/squid/HISTORY#21 -
/home/seth/sourcemage/devel/http/squid/HISTORY ====
0a1,5
> 2004-06-17 Seth Woolley <seth AT tautology.org>
> * BUILD, DETAILS: added ntlm not enough bounds checking buffer
> overflow remote exploit patch SECURITY FIX! (our spell enabled
> NTLM by default so all installs are vulnerable!)
>

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.9961.tar.bz2
Description: Binary data

Attachment: pgpYMm7EEuS6_.pgp
Description: PGP signature



  • [SM-Security] SECURITY UPDATE for http/squid, Seth Alan Woolley, 06/17/2004

Archive powered by MHonArc 2.6.24.

Top of Page