Skip to Content.
Sympa Menu

sm-security - [SM-Security] Squid vulnerability

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] Squid vulnerability
  • Date: Wed, 18 May 2005 22:46:18 +0200

Synopsis
========
Malicious users may spoof DNS lookups if the DNS client UDP port
(random, assigned by OS at startup) is unfiltered and your network is
not protected from IP spoofing.

Background
==========
Squid is...
* a full-featured Web proxy cache
* designed to run on Unix systems
* free, open-source software
* the result of many contributions by unpaid (and paid) volunteers

Affected packages
=================
squid in all grimoires is affected.
This is now fixed in devel, test, stable-rc and stable grimoire.

Resolution
==========
squid has been updated to 2.5.STABLE10. This release also fixes other
bugs and minor security problem.

All scribe users should upgrade to the latest available version:
#scribe update
#cast -c gaim

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature




Archive powered by MHonArc 2.6.24.

Top of Page