| USN-565-1: Squid vulnerability |
| Written by webmaster | |
| Wednesday, 09 January 2008 | |
|
Referenced CVEs: CVE-2007-6239 Description:
===========================================================
Ubuntu Security Notice USN-565-1 January 09, 2008
squid vulnerability
CVE-2007-6239
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
squid 2.5.12-4ubuntu2.3
Ubuntu 6.10:
squid 2.6.1-3ubuntu1.5
Ubuntu 7.04:
squid 2.6.5-4ubuntu2.1
Ubuntu 7.10:
squid 2.6.14-1ubuntu2.1
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
It was discovered that Squid did not always clean up cache memory
correctly. A remote attacker could manipulate cache update replies and
cause Squid to use all available memory, leading to a denial of service.
Read more at: http://www.ubuntu.com/usn/usn-565-1 |
| < Prev | Next > |
|---|