oss-security - Re: CVE request: Squid <2.7.6, 3.0.13, 3.1.0.5 DoS

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1717694660.4824711233934390365.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Fri, 6 Feb 2009 10:33:10 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org
Subject: Re: CVE request: Squid <2.7.6, 3.0.13, 3.1.0.5 DoS


----- "Robert Buchholz" <rbu@...too.org> wrote:

> Squid before 2.7.STABLE6, 3.0.STABLE13, and 3.1.0.5 is vulnerable to a
> 
> Denial of Service issue:
> 
> https://bugs.gentoo.org/show_bug.cgi?id=257585
> http://www.squid-cache.org/Advisories/SQUID-2009_1.txt

I don't think Steve Christey reads this list, you need to CC him directly (I
just noticed he's not on the CC).

Steve, there are more details in the Red Hat bug regarding this flaw:
https://bugzilla.redhat.com/show_bug.cgi?id=484246

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.