squid -- missing input sanitising

2005-02-23T00:00:00
ID DSA-688
Type debian
Reporter Debian
Modified 2005-02-23T00:00:00

Description

Upstream developers have discovered several problems in squid, the Internet object cache, the popular WWW proxy cache. A remote attacker can cause squid to crash via certain DNS responses.

For the stable distribution (woody) these problems have been fixed in version 2.4.6-2woody7.

For the unstable distribution (sid) these problems have been fixed in version 2.5.8-3.

We recommend that you upgrade your squid package.