ELSA-2013-0505

ELSA-2013-0505 - squid security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2013-02-22

Description

[7:3.1.10-16]
- Resolves: #888198 - CVE-2012-5643: improved upstream patch

[7:3.1.10-15]
- Reverts: #861062 - Squid delays on FQDNs that don't contains AAAA record

[7:3.1.10-14]
- Resolves: #888198 - CVE-2012-5643: patch

[7:3.1.10-13]
- Resolves: #888198 - CVE-2012-5643: DoS (excessive resource consumption)

[7:3.1.10-12]
- Resolves #861062 - add configure directive --enable-internal-dns

[7:3.1.10-11 ]
- Resolves #861062 - Squid delays on FQDNs that don't contains AAAA record

[7:3.1.10-10]
- Resolves #798090 - Client timeout uses server-side 'read_timeout'
- Resolves #833086 - Private md5 hash function does not comply FIPS
- Resolves #782732 - Squid crashes by segfault when it reboots
- Resolves #797571 - Squid userid is not added to wbpriv group
- Disable strict-error-checking on account of squid-fips.patch

Related CVEs

CVE-2012-5643

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	squid-3.1.10-16.el6.src.rpm	cf2c42f21045539b022ac77293cdf0d54f14a6d401f5e61d0b915289b5f58f49	ELSA-2023-6884	ol6_i386_latest_archive
	squid-3.1.10-16.el6.src.rpm	cf2c42f21045539b022ac77293cdf0d54f14a6d401f5e61d0b915289b5f58f49	ELSA-2023-6884	ol6_u4_i386_base
	squid-3.1.10-16.el6.i686.rpm	5276423aaed8506d239d7a4e8ef40345545ea5859cab879825c9727ec48762df	ELSA-2023-6884	ol6_i386_latest_archive
	squid-3.1.10-16.el6.i686.rpm	5276423aaed8506d239d7a4e8ef40345545ea5859cab879825c9727ec48762df	ELSA-2023-6884	ol6_u4_i386_base
Oracle Linux 6 (x86_64)	squid-3.1.10-16.el6.src.rpm	cf2c42f21045539b022ac77293cdf0d54f14a6d401f5e61d0b915289b5f58f49	ELSA-2023-6884	ol6_u4_x86_64_base
	squid-3.1.10-16.el6.src.rpm	cf2c42f21045539b022ac77293cdf0d54f14a6d401f5e61d0b915289b5f58f49	ELSA-2023-6884	ol6_x86_64_latest_archive
	squid-3.1.10-16.el6.x86_64.rpm	793cb66b5859d0c42e68964ba3a37b609e69231301bd5c065e9af412a042a737	ELSA-2023-6884	ol6_u4_x86_64_base
	squid-3.1.10-16.el6.x86_64.rpm	793cb66b5859d0c42e68964ba3a37b609e69231301bd5c065e9af412a042a737	ELSA-2023-6884	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team