Skip to navigation

Security Advisory Moderate: squid security update

Advisory: RHSA-2007:1130-4
Type: Security Advisory
Severity: Moderate
Issued on: 2007-12-18
Last updated on: 2007-12-18
Affected Products: RHEL Desktop Workstation (v. 5 client)
Red Hat Desktop (v. 3)
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux AS (v. 4.6.z)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux ES (v. 4.6.z)
Red Hat Enterprise Linux EUS (v. 5.1.z server)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Enterprise Linux WS (v. 4)
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor
CVEs (cve.mitre.org): CVE-2007-6239

Details

Updated squid packages that fix a security issue are now available for Red
Hat Enterprise Linux 2.1, 3, 4 and 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects.

A flaw was found in the way squid stored HTTP headers for cached objects
in system memory. An attacker could cause squid to use additional memory,
and trigger high CPU usage when processing requests for certain cached
objects, possibly leading to a denial of service. (CVE-2007-6239)

Users of squid are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
squid-2.6.STABLE6-5.el5_1.2.src.rpm
File outdated by:  RHSA-2010:0221
    MD5: 30db384fc837a2b7cfe3be12c80bfed0
 
IA-32:
squid-2.6.STABLE6-5.el5_1.2.i386.rpm
File outdated by:  RHSA-2010:0221
    MD5: 172091586b423ff41d70b9a2d9fead00
 
x86_64:
squid-2.6.STABLE6-5.el5_1.2.x86_64.rpm
File outdated by:  RHSA-2010:0221
    MD5: 76876b1c2f21b013ab81b2203cc274c2
 
Red Hat Desktop (v. 3)

SRPMS:
squid-2.5.STABLE3-8.3E.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: 33e54e551779fb32990b54b406143027
 
IA-32:
squid-2.5.STABLE3-8.3E.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: ab247e2aba77e505d88cff074849f045
 
x86_64:
squid-2.5.STABLE3-8.3E.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 0aafeeea7acb8f7c74bee676b9de8b57
 
Red Hat Desktop (v. 4)

SRPMS:
squid-2.5.STABLE14-1.4E.el4_6.1.src.rpm
File outdated by:  RHBA-2008:0230
    MD5: c252e79be2fcba9f696565ed87b12aae
 
IA-32:
squid-2.5.STABLE14-1.4E.el4_6.1.i386.rpm
File outdated by:  RHBA-2008:0230
    MD5: d951a7bd76166490d1a922b4772c4740
 
x86_64:
squid-2.5.STABLE14-1.4E.el4_6.1.x86_64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 463f654fc16dff0e65728f111f9e685f
 
Red Hat Enterprise Linux (v. 5 server)

SRPMS:
squid-2.6.STABLE6-5.el5_1.2.src.rpm
File outdated by:  RHSA-2010:0221
    MD5: 30db384fc837a2b7cfe3be12c80bfed0
 
IA-32:
squid-2.6.STABLE6-5.el5_1.2.i386.rpm
File outdated by:  RHSA-2010:0221
    MD5: 172091586b423ff41d70b9a2d9fead00
 
IA-64:
squid-2.6.STABLE6-5.el5_1.2.ia64.rpm
File outdated by:  RHSA-2010:0221
    MD5: 4eaa32cfae9667e7b96a6a756bff1559
 
PPC:
squid-2.6.STABLE6-5.el5_1.2.ppc.rpm
File outdated by:  RHSA-2010:0221
    MD5: 404a22e1fd3ff9282e83c166d4c43307
 
s390x:
squid-2.6.STABLE6-5.el5_1.2.s390x.rpm
File outdated by:  RHSA-2010:0221
    MD5: 3e74a922b55cbdff9486079828d73582
 
x86_64:
squid-2.6.STABLE6-5.el5_1.2.x86_64.rpm
File outdated by:  RHSA-2010:0221
    MD5: 76876b1c2f21b013ab81b2203cc274c2
 
Red Hat Enterprise Linux AS (v. 2.1)

SRPMS:
squid-2.4.STABLE7-1.21as.11.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: ece653d214fe3de7552e4c4f105ae3a7
 
IA-32:
squid-2.4.STABLE7-1.21as.11.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: b9d27df2ff2d7dcbe20abcc424c9aba6
 
IA-64:
squid-2.4.STABLE7-1.21as.11.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: fe6279f75619d921cfb543f91a5ef93f
 
Red Hat Enterprise Linux AS (v. 3)

SRPMS:
squid-2.5.STABLE3-8.3E.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: 33e54e551779fb32990b54b406143027
 
IA-32:
squid-2.5.STABLE3-8.3E.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: ab247e2aba77e505d88cff074849f045
 
IA-64:
squid-2.5.STABLE3-8.3E.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 6688d8d1bd5221c4eb31b55da930bb54
 
PPC:
squid-2.5.STABLE3-8.3E.ppc.rpm
File outdated by:  RHSA-2008:0214
    MD5: fe42f1e938614448fedf5fe82768789f
 
s390:
squid-2.5.STABLE3-8.3E.s390.rpm
File outdated by:  RHSA-2008:0214
    MD5: 1b5d86c9df50e17f98e1c4bf436cc66b
 
s390x:
squid-2.5.STABLE3-8.3E.s390x.rpm
File outdated by:  RHSA-2008:0214
    MD5: 74bfad18cae240d909f022fa43de5d8e
 
x86_64:
squid-2.5.STABLE3-8.3E.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 0aafeeea7acb8f7c74bee676b9de8b57
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
squid-2.5.STABLE14-1.4E.el4_6.1.src.rpm
File outdated by:  RHBA-2008:0230
    MD5: c252e79be2fcba9f696565ed87b12aae
 
IA-32:
squid-2.5.STABLE14-1.4E.el4_6.1.i386.rpm
File outdated by:  RHBA-2008:0230
    MD5: d951a7bd76166490d1a922b4772c4740
 
IA-64:
squid-2.5.STABLE14-1.4E.el4_6.1.ia64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 9536874e2e40bc9669b767c7cbc5c97e
 
PPC:
squid-2.5.STABLE14-1.4E.el4_6.1.ppc.rpm
File outdated by:  RHBA-2008:0230
    MD5: 29979a4f2fe43d50e7cc3ab32948b956
 
s390:
squid-2.5.STABLE14-1.4E.el4_6.1.s390.rpm
File outdated by:  RHBA-2008:0230
    MD5: 124ea7fcf76fd2ed056d57a68af45f57
 
s390x:
squid-2.5.STABLE14-1.4E.el4_6.1.s390x.rpm
File outdated by:  RHBA-2008:0230
    MD5: 53c5859f6826ee234bd3f2fc7268c79a
 
x86_64:
squid-2.5.STABLE14-1.4E.el4_6.1.x86_64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 463f654fc16dff0e65728f111f9e685f
 
Red Hat Enterprise Linux AS (v. 4.6.z)

SRPMS:
squid-2.5.STABLE14-1.4E.el4_6.1.src.rpm
File outdated by:  RHBA-2008:0230
    MD5: c252e79be2fcba9f696565ed87b12aae
 
IA-32:
squid-2.5.STABLE14-1.4E.el4_6.1.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: d951a7bd76166490d1a922b4772c4740
 
IA-64:
squid-2.5.STABLE14-1.4E.el4_6.1.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 9536874e2e40bc9669b767c7cbc5c97e
 
PPC:
squid-2.5.STABLE14-1.4E.el4_6.1.ppc.rpm
File outdated by:  RHSA-2008:0214
    MD5: 29979a4f2fe43d50e7cc3ab32948b956
 
s390:
squid-2.5.STABLE14-1.4E.el4_6.1.s390.rpm
File outdated by:  RHSA-2008:0214
    MD5: 124ea7fcf76fd2ed056d57a68af45f57
 
s390x:
squid-2.5.STABLE14-1.4E.el4_6.1.s390x.rpm
File outdated by:  RHSA-2008:0214
    MD5: 53c5859f6826ee234bd3f2fc7268c79a
 
x86_64:
squid-2.5.STABLE14-1.4E.el4_6.1.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 463f654fc16dff0e65728f111f9e685f
 
Red Hat Enterprise Linux ES (v. 2.1)

SRPMS:
squid-2.4.STABLE7-1.21as.11.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: ece653d214fe3de7552e4c4f105ae3a7
 
IA-32:
squid-2.4.STABLE7-1.21as.11.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: b9d27df2ff2d7dcbe20abcc424c9aba6
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
squid-2.5.STABLE3-8.3E.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: 33e54e551779fb32990b54b406143027
 
IA-32:
squid-2.5.STABLE3-8.3E.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: ab247e2aba77e505d88cff074849f045
 
IA-64:
squid-2.5.STABLE3-8.3E.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 6688d8d1bd5221c4eb31b55da930bb54
 
x86_64:
squid-2.5.STABLE3-8.3E.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 0aafeeea7acb8f7c74bee676b9de8b57
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
squid-2.5.STABLE14-1.4E.el4_6.1.src.rpm
File outdated by:  RHBA-2008:0230
    MD5: c252e79be2fcba9f696565ed87b12aae
 
IA-32:
squid-2.5.STABLE14-1.4E.el4_6.1.i386.rpm
File outdated by:  RHBA-2008:0230
    MD5: d951a7bd76166490d1a922b4772c4740
 
IA-64:
squid-2.5.STABLE14-1.4E.el4_6.1.ia64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 9536874e2e40bc9669b767c7cbc5c97e
 
x86_64:
squid-2.5.STABLE14-1.4E.el4_6.1.x86_64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 463f654fc16dff0e65728f111f9e685f
 
Red Hat Enterprise Linux ES (v. 4.6.z)

SRPMS:
squid-2.5.STABLE14-1.4E.el4_6.1.src.rpm
File outdated by:  RHBA-2008:0230
    MD5: c252e79be2fcba9f696565ed87b12aae
 
IA-32:
squid-2.5.STABLE14-1.4E.el4_6.1.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: d951a7bd76166490d1a922b4772c4740
 
IA-64:
squid-2.5.STABLE14-1.4E.el4_6.1.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 9536874e2e40bc9669b767c7cbc5c97e
 
x86_64:
squid-2.5.STABLE14-1.4E.el4_6.1.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 463f654fc16dff0e65728f111f9e685f
 
Red Hat Enterprise Linux EUS (v. 5.1.z server)

SRPMS:
squid-2.6.STABLE6-5.el5_1.2.src.rpm
File outdated by:  RHSA-2010:0221
    MD5: 30db384fc837a2b7cfe3be12c80bfed0
 
IA-32:
squid-2.6.STABLE6-5.el5_1.2.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: 172091586b423ff41d70b9a2d9fead00
 
IA-64:
squid-2.6.STABLE6-5.el5_1.2.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 4eaa32cfae9667e7b96a6a756bff1559
 
PPC:
squid-2.6.STABLE6-5.el5_1.2.ppc.rpm
File outdated by:  RHSA-2008:0214
    MD5: 404a22e1fd3ff9282e83c166d4c43307
 
s390x:
squid-2.6.STABLE6-5.el5_1.2.s390x.rpm
File outdated by:  RHSA-2008:0214
    MD5: 3e74a922b55cbdff9486079828d73582
 
x86_64:
squid-2.6.STABLE6-5.el5_1.2.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 76876b1c2f21b013ab81b2203cc274c2
 
Red Hat Enterprise Linux WS (v. 3)

SRPMS:
squid-2.5.STABLE3-8.3E.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: 33e54e551779fb32990b54b406143027
 
IA-32:
squid-2.5.STABLE3-8.3E.i386.rpm
File outdated by:  RHSA-2008:0214
    MD5: ab247e2aba77e505d88cff074849f045
 
IA-64:
squid-2.5.STABLE3-8.3E.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 6688d8d1bd5221c4eb31b55da930bb54
 
x86_64:
squid-2.5.STABLE3-8.3E.x86_64.rpm
File outdated by:  RHSA-2008:0214
    MD5: 0aafeeea7acb8f7c74bee676b9de8b57
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
squid-2.5.STABLE14-1.4E.el4_6.1.src.rpm
File outdated by:  RHBA-2008:0230
    MD5: c252e79be2fcba9f696565ed87b12aae
 
IA-32:
squid-2.5.STABLE14-1.4E.el4_6.1.i386.rpm
File outdated by:  RHBA-2008:0230
    MD5: d951a7bd76166490d1a922b4772c4740
 
IA-64:
squid-2.5.STABLE14-1.4E.el4_6.1.ia64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 9536874e2e40bc9669b767c7cbc5c97e
 
x86_64:
squid-2.5.STABLE14-1.4E.el4_6.1.x86_64.rpm
File outdated by:  RHBA-2008:0230
    MD5: 463f654fc16dff0e65728f111f9e685f
 
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor

SRPMS:
squid-2.4.STABLE7-1.21as.11.src.rpm
File outdated by:  RHSA-2008:0214
    MD5: ece653d214fe3de7552e4c4f105ae3a7
 
IA-64:
squid-2.4.STABLE7-1.21as.11.ia64.rpm
File outdated by:  RHSA-2008:0214
    MD5: fe6279f75619d921cfb543f91a5ef93f
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

410181 - CVE-2007-6239 squid: DoS in cache updates


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/