squid security update

CentOS Errata and Security Advisory CESA-2008:0214

Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects.

A flaw was found in the way squid manipulated HTTP headers for cached
objects stored in system memory. An attacker could use this flaw to cause a
squid child process to exit. This interrupted existing connections and made
proxy services unavailable. Note: the parent squid process started a new
child process, so this attack only resulted in a temporary denial of
service. (CVE-2008-1612)

Users of squid are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-April/076971.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076972.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076974.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076975.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076976.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076977.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076980.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076981.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076992.html
https://lists.centos.org/pipermail/centos-announce/2008-April/076993.html

Affected packages:
squid

Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0214