oss-security - Re: CVE request: Squid <2.7.6, 3.0.13, 3.1.0.5 DoS

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Fri, 6 Feb 2009 10:33:10 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org
Subject: Re: CVE request: Squid <2.7.6, 3.0.13, 3.1.0.5 DoS


----- "Robert Buchholz" <rbu@...too.org> wrote:

> Squid before 2.7.STABLE6, 3.0.STABLE13, and 3.1.0.5 is vulnerable to a
> 
> Denial of Service issue:
> 
> https://bugs.gentoo.org/show_bug.cgi?id=257585
> http://www.squid-cache.org/Advisories/SQUID-2009_1.txt

I don't think Steve Christey reads this list, you need to CC him directly (I
just noticed he's not on the CC).

Steve, there are more details in the Red Hat bug regarding this flaw:
https://bugzilla.redhat.com/show_bug.cgi?id=484246

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.