drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in squid
Name: |
Denial of Service in squid |
|
ID: |
MDVSA-2009:034 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Mandriva 2008.1, Mandriva 2009.0 |
|
Datum: |
Di, 10. Februar 2009, 19:15 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0478 |
|
Applikationen: |
Squid |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1234289711-6173-380
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2009:034 http://www.mandriva.com/security/ _______________________________________________________________________
Package : squid Date : February 10, 2009 Affected: 2008.1, 2009.0 _______________________________________________________________________
Problem Description:
Due to an internal error Squid is vulnerable to a denial of service attack when processing specially crafted requests. This problem allows any client to perform a denial of service attack on the Squid service (CVE-2009-0478). The updated packages have been patched to adress this. _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0478 _______________________________________________________________________
Updated Packages:
Mandriva Linux 2008.1: 16a8648b21391a385fb98a691ad05850 2008.1/i586/squid-3.0-1.1mdv2008.1.i586.rpm ba61fb27a256c11a53120baf0e32fd94 2008.1/i586/squid-cachemgr-3.0-1.1mdv2008.1.i586.rpm 02c5602fa6a2bf7b1f97de5050a71af5 2008.1/SRPMS/squid-3.0-1.1mdv2008.1.src.rpm
Mandriva Linux 2008.1/X86_64: 22e84fc5aa771bdf9cf1d1192f94a1bf 2008.1/x86_64/squid-3.0-1.1mdv2008.1.x86_64.rpm 340964989d6639ce4d1fb4bd089d0a89 2008.1/x86_64/squid-cachemgr-3.0-1.1mdv2008.1.x86_64.rpm 02c5602fa6a2bf7b1f97de5050a71af5 2008.1/SRPMS/squid-3.0-1.1mdv2008.1.src.rpm
Mandriva Linux 2009.0: bf09cfce8db0718009470bff9f680039 2009.0/i586/squid-3.0-8.1mdv2009.0.i586.rpm 0da7251030b5e0912aaf47937562c288 2009.0/i586/squid-cachemgr-3.0-8.1mdv2009.0.i586.rpm 64c0b0ac2cf102141ee7a8ad8747e42d 2009.0/SRPMS/squid-3.0-8.1mdv2009.0.src.rpm
Mandriva Linux 2009.0/X86_64: d698fd6bf0598af3e4cb42f88dd539be 2009.0/x86_64/squid-3.0-8.1mdv2009.0.x86_64.rpm 874be46833d14b23923150203be90109 2009.0/x86_64/squid-cachemgr-3.0-8.1mdv2009.0.x86_64.rpm 64c0b0ac2cf102141ee7a8ad8747e42d 2009.0/SRPMS/squid-3.0-8.1mdv2009.0.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFJkZiwmqjQ0CJFipgRAmuTAJ974JA6q0e//UvXbBSrmBJ5LSP9FgCg1cOQ OfpIBObBJQgI6D90nrPgjPk= =0O4c -----END PGP SIGNATURE-----
------------=_1234289711-6173-380 Content-Type: text/plain; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://www.mandrivastore.com Join the Club : http://www.mandrivaclub.com _______________________________________________________
------------=_1234289711-6173-380--
|
|
|
|