A squid security update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-275
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE9
Release : 1.FC2.2
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
---------------------------------------------------------------------
* Tue Mar 29 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.2
- more upstream patches
- include -libbind patch, to prevent squid from picking up a dependency
on libbind.
- remove references to /etc/squid/errors, since squid now uses
{_datadir}/squid/errors/English by default. (overridable in squid.conf)
- Mark {datadir}/squid/errors as config(noreplace) so custom error messages
won't get scribbled on.
* Wed Mar 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.1
- New upstream version, with 14 upstream patches. Includes fix for
bz#150234 cookie leak in squid
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
4f87823cc8d2e7dbbd1c6f0bc390c7a5 SRPMS/squid-2.5.STABLE9-1.FC2.2.src.rpm
e60b6b22ae7af50eca46e621155cfd90 x86_64/squid-2.5.STABLE9-1.FC2.2.x86_64.rpm
899e5cf5ee75a51ea8c2256bf4c2e205 x86_64/debug/squid-debuginfo-2.5.STABLE9-1.FC2.2.x86_64.rpm
f4bf9886e9c100e0ac9bf17b2e40f7d4 i386/squid-2.5.STABLE9-1.FC2.2.i386.rpm
9c06c585c6d113a154e99f8573c530dd i386/debug/squid-debuginfo-2.5.STABLE9-1.FC2.2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-275
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE9
Release : 1.FC2.2
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
---------------------------------------------------------------------
* Tue Mar 29 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.2
- more upstream patches
- include -libbind patch, to prevent squid from picking up a dependency
on libbind.
- remove references to /etc/squid/errors, since squid now uses
{_datadir}/squid/errors/English by default. (overridable in squid.conf)
- Mark {datadir}/squid/errors as config(noreplace) so custom error messages
won't get scribbled on.
* Wed Mar 16 2005 Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-1.FC3.1
- New upstream version, with 14 upstream patches. Includes fix for
bz#150234 cookie leak in squid
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
4f87823cc8d2e7dbbd1c6f0bc390c7a5 SRPMS/squid-2.5.STABLE9-1.FC2.2.src.rpm
e60b6b22ae7af50eca46e621155cfd90 x86_64/squid-2.5.STABLE9-1.FC2.2.x86_64.rpm
899e5cf5ee75a51ea8c2256bf4c2e205 x86_64/debug/squid-debuginfo-2.5.STABLE9-1.FC2.2.x86_64.rpm
f4bf9886e9c100e0ac9bf17b2e40f7d4 i386/squid-2.5.STABLE9-1.FC2.2.i386.rpm
9c06c585c6d113a154e99f8573c530dd i386/debug/squid-debuginfo-2.5.STABLE9-1.FC2.2.i386.rpm
This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.
